CVE-2026-53460

Vulnerability

ImageMagick, a widely used image manipulation software, is affected by an out-of-Memory condition in versions prior to 6.9.13-50 and 7.1.2-25. This vulnerability arises from a missing check for maximum memory requests within the AcquireAlignedMemory function, which can be triggered under specific conditions [1].

Exploitation

An attacker can exploit this vulnerability by providing a specially crafted image file to an ImageMagick process. The vulnerability is triggered when the AcquireAlignedMemory function attempts to allocate memory without properly checking the requested size against system limits, leading to an out-of-memory error [1].

Impact

Successful exploitation of this vulnerability results in an out-of-Memory condition, which can lead to a denial-of-service (DoS) state for the ImageMagick process or the application utilizing it. This prevents legitimate users from accessing or processing images, impacting the availability of the service [1].

Mitigation

This vulnerability has been patched in ImageMagick versions 6.9.13-50 and 7.1.2-25. Users are strongly advised to upgrade to these fixed versions or later to mitigate the risk of an out-of-Memory condition [1].