CVE Database›Document archive›CVE-2026-53464

CVE-2026-53464

ImageMagick: ImageMagick: Memory leak via invalid options to wand option parser

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · June 11, 2026

Updated · August 19, 2026

Description

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A local user could exploit this vulnerability by providing invalid options to the wand option parser, which would cause a small memory leak. This memory leak could lead to a Denial of Service (DoS) due to resource exhaustion.

Statement

This flaw in ImageMagick is rated as Low impact. A local attacker could trigger a small memory leak by providing specially crafted invalid options to the wand option parser. While this could potentially lead to a denial of service due to resource exhaustion, the attack requires local access and specific user interaction, limiting its overall impact on Red Hat products.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime