CVE-2026-53463

4.3

MEDIUMCVSS v3

Published

June 10, 2026

Affected

4 projects

Assigned by

GitHub

Severity scale

010

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched in versions 6.9.13-50 and 7.1.2-25.

ImageMagick/ImageMagick

GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.

< 6.9.13-50, >= 7.0.0-0, < 7.1.2-25NVD

imagemagick

NPMA wrapper around the imagemagick cli

< 6.9.13-50, >= 7.0.0-0, < 7.1.2-25NVD

ImageMagick

More on this CVE

NVD↗GitHub Advisory↗

ChocolateyImageMagick® is a software suite to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 100) including DPX, EXR, GIF, JPEG, JPEG-2000, PDF, PhotoCD, PNG, Postscript, SVG, and TIFF. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. This package installs the dynamic 16 bits-per-pixel (with high dynamic-range imaging enabled for x64) version of ImageMagick. You can add -PackageParameters InstallDevelopmentHeaders=true to the choco install command in order to install the development headers and libraries for C and C++ You can add -PackageParameters LegacySupport=true to the choco install command in order to install the legacy utilities (e.g. convert) You can add -PackageParameters NoDesktop=true to the choco install command in order to not create a desktop icon You can add -PackageParameters InstallOldFFmpeg=true to the choco install command to install the FFmpeg included with ImageMagick

< 6.9.13-50, >= 7.0.0-0, < 7.1.2-25NVD

imagemagick

Debian Bookwormimage manipulation programs -- binaries

< 6.9.13-50, >= 7.0.0-0, < 7.1.2-25NVD

Security Advisories

CVE-2026-53463

Description

More on this CVE