Skip to content
OpenAdvisories
Unscored USN-5158-1 5 CVEs

imagemagick vulnerabilities

Published Nov 29, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ImageMagick incorrectly handled certain values
when processing visual effects based image files. By tricking a user into
opening a specially crafted image file, an attacker could crash the
application causing a denial of service. (CVE-2021-20244)

It was discovered that ImageMagick incorrectly handled certain values
when performing resampling operations. By tricking a user into opening
a specially crafted image file, an attacker could crash the application
causing a denial of service. (CVE-2021-20246)

It was discovered that ImageMagick incorrectly handled certain values
when processing visual effects based image files. By tricking a user into
opening a specially crafted image file, an attacker could crash the
application causing a denial of service (CVE-2021-20309)

It was discovered that ImageMagick incorrectly handled certain values
when processing thumbnail image data. By tricking a user into opening
a specially crafted image file, an attacker could crash the application
causing a denial of service. (CVE-2021-20312)

It was discovered that ImageMagick incorrectly handled memory cleanup
when performing certain cryptographic operations. Under certain conditions
sensitive cryptographic information could be disclosed. (CVE-2021-20313)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS imagemagick 8:6.9.7.4+dfsg-16ubuntu6.12
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS imagemagick 8:6.7.7.10-6ubuntu3.13+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS imagemagick 8:6.8.9.9-7ubuntu5.16+esm1

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2021-20244
  • report
    https://ubuntu.com/security/CVE-2021-20246
  • report
    https://ubuntu.com/security/CVE-2021-20309
  • report
    https://ubuntu.com/security/CVE-2021-20312
  • report
    https://ubuntu.com/security/CVE-2021-20313