CVE-2026-53465

Vulnerability

ImageMagick, a digital image editing and manipulation software, is affected by a heap buffer over-write vulnerability when encoding multi-frame images using the SF3 encoder. This issue exists in versions prior to 7.1.2-25 [1].

Exploitation

An attacker can exploit this vulnerability by crafting a multi-frame image. The specific conditions or user interaction required for exploitation are not detailed in the available references, but the vulnerability is triggered during the encoding process with the SF3 encoder [1].

Impact

Successful exploitation of this vulnerability results in a heap buffer over-write. The exact impact on confidentiality, integrity, and availability is not specified in the provided references, but buffer over-writes can often lead to denial-of-service or potentially code execution [1].

Mitigation

This vulnerability has been patched in ImageMagick version 7.1.2-25. Users are advised to upgrade to this version or a later one to address the issue [1].