CVE-2026-53464
ImageMagick: ImageMagick: Memory leak via invalid options to wand option parser
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 11, 2026
Updated · August 19, 2026
Description
A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A local user could exploit this vulnerability by providing invalid options to the wand option parser, which would cause a small memory leak. This memory leak could lead to a Denial of Service (DoS) due to resource exhaustion.
Statement
This flaw in ImageMagick is rated as Low impact. A local attacker could trigger a small memory leak by providing specially crafted invalid options to the wand option parser. While this could potentially lead to a denial of service due to resource exhaustion, the attack requires local access and specific user interaction, limiting its overall impact on Red Hat products.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-772 · Missing Release of Resource after Effective Lifetime