Skip to content
OpenAdvisories
High USN-8021-1 1 CVE

imagemagick vulnerability

Published Feb 10, 2026 · Updated Oct 27, 2026

Ecosystem: Ubuntu

Summary

Benny Isaacs discovered that ImageMagick did not properly manage memory
when processing certain image files. An attacker could possibly use this
issue to cause a denial of service or execute arbitrary code.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS imagemagick 8:6.7.7.10-6ubuntu3.13+esm18
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS imagemagick 8:6.8.9.9-7ubuntu5.16+esm17
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS imagemagick 8:6.9.7.4+dfsg-16ubuntu6.15+esm9
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS imagemagick 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS imagemagick 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6

Vulnerabilities 1

  • High 8.1
    CVE-2026-23876

    Heap buffer overflow with attacker-controlled data in XBM parser

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder (ReadXBMImage) allows an attacker to write controlled data p…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-23876