DEV Community

CVE Reports
CVE Reports

Posted on • Originally published at cvereports.com

CVE-2026-53467: CVE-2026-53467: Heap Information Disclosure via Uninitialized Pixel Cache in ImageMagick MNG Decoder

#security #cve #cybersecurity

CVE-2026-53467: Heap Information Disclosure via Uninitialized Pixel Cache in ImageMagick MNG Decoder

Vulnerability ID: CVE-2026-53467
CVSS Score: 5.3
Published: 2026-07-23

CVE-2026-53467 is a heap information disclosure vulnerability in the Multiple-image Network Graphics (MNG) decoder of ImageMagick. The vulnerability arises from a failure to zero-initialize newly allocated pixel cache memory buffers. A remote attacker can exploit this by submitting a crafted sparse MNG image file to trigger uninitialized memory preservation. The resulting output contains residual heap bytes, potentially leaking sensitive process memory or assisting in ASLR bypass.

TL;DR

A heap information disclosure vulnerability in ImageMagick's MNG decoder allows unauthenticated remote attackers to read uninitialized process heap memory by processing crafted sparse MNG files.

Technical Details

  • CWE ID: CWE-908 (Use of Uninitialized Resource)
  • Attack Vector: Network (AV:N)
  • CVSS v3.1 Score: 5.3
  • EPSS Score: 0.00197 (Percentile: 9.76%)
  • Impact: Low Confidentiality (Heap Information Disclosure)
  • Exploit Status: none
  • KEV Status: Not listed on CISA KEV

Affected Systems

  • ImageMagick v7 branches prior to 7.1.2-26
  • ImageMagick v6 branches prior to 6.9.13-51
  • ImageMagick (v7 Branch): >= 7.0.1-0, < 7.1.2-26 (Fixed in: 7.1.2-26)
  • ImageMagick (v6 Branch): < 6.9.13-51 (Fixed in: 6.9.13-51)

Code Analysis

Commit: 38ba210

ImageMagick v7 Patch for version bump and release verification.

Commit: c1e211d

ImageMagick v6 Patch for version bump and release verification.

Mitigation Strategies

  • Disable MNG and JNG coders via policy.xml configuration.
  • Upgrade ImageMagick to patched versions 6.9.13-51 or 7.1.2-26.
  • Use security policy restrictions to block unneeded image formats.

Remediation Steps:

  1. Locate your ImageMagick security configuration file, typically found at /etc/ImageMagick-7/policy.xml or /etc/ImageMagick-6/policy.xml.
  2. Open the file in a text editor and add policy elements to disable MNG and JNG coders.
  3. To perform a full fix, upgrade ImageMagick using your system package manager or compile the latest source.
  4. Validate the patch by running identify -list policy and ensuring MNG is set to rights='none'.

References

Read the full report for CVE-2026-53467 on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)