Medium severity4.3NVD Advisory· Published Jun 10, 2026· Updated Jun 11, 2026

CVE-2026-53463

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched in versions 6.9.13-50 and 7.1.2-25.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ImageMagick/Imagemagickinferred2 versions
>=7.1.2-0,<7.1.2-25+ 1 more
- (no CPE)range: >=7.1.2-0,<7.1.2-25
- (no CPE)range: < 6.9.13-50, < 7.1.2-25
osv-coords12 versions
pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6
< 7.1.2.25-2.1+ 11 more
- (no CPE)range: < 7.1.2.25-2.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p9rq-q46c-g4x6nvdVendor Advisory

News mentions

ImageMagick: 25 Vulnerabilities Disclosed in Single Batch on June 10, 2026
Vypr Intelligence · Jun 10, 2026

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000