CVE-2026-53465
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk2th percentile — higher than 2% of all known CVEs
Summary
ImageMagick prior to version 7.1.2-25 contained a vulnerability that allowed for a heap buffer over-write when encoding a crafted multi-frame image with the SF3 encoder.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized memory access and potential execution of malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to upgrade ImageMagick to version 7.1.2-25 or later to mitigate this vulnerability.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25.