Medium USN-6621-1 1 CVE

imagemagick vulnerability

Published Feb 1, 2024 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ImageMagick incorrectly handled certain values when
processing BMP files. An attacker could exploit this to cause a denial of
service.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	imagemagick	8:6.7.7.10-6ubuntu3.13+esm7
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	imagemagick	8:6.8.9.9-7ubuntu5.16+esm10
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	imagemagick	8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	imagemagick	8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS	imagemagick	8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3

Vulnerabilities 1

Medium 6.2

CVE-2023-5341

Imagemagick: heap use-after-free in coders/bmp.c

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

Red Hat Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 imagemagick Linux Debian Ubuntu Alpine

Nov 19, 2023

References

report
https://ubuntu.com/security/CVE-2023-5341