Skip to content
OpenAdvisories
Unscored USN-8127-1 0 CVEs

imagemagick vulnerabilities

Published Mar 30, 2026 · Updated Jun 25, 2026

Summary

It was discovered that ImageMagick did not properly process certain tags
prior to an image being loaded. An attacker could possibly use this issue
to cause ImageMagick to crash, resulting in a denial of service.
(CVE-2026-23952)

It was discovered that ImageMagick did not properly handle temporary file
creation failures. An attacker could possibly use this issue to cause
ImageMagick to crash, resulting in a denial of service. (CVE-2026-25795)

It was discovered that ImageMagick did not properly manage memory under
certain conditions. An attacker could possibly use this issue to cause
ImageMagick to consume resources, resulting in a denial of service.
(CVE-2026-25796)

It was discovered that ImageMagick incorrectly handled certain specially
crafted image files. An attacker could possibly use this issue to cause
ImageMagick to crash, resulting in a denial of service. (CVE-2026-25798)

It was discovered that ImageMagick did not properly validate certain YUV
sampling factors. An attacker could possibly use this issue to cause
ImageMagick to crash, resulting in a denial of service. (CVE-2026-25799)

It was discovered that ImageMagick incorrectly handled certain specially
crafted image files. An attacker could possibly use this issue to cause
ImageMagick to crash, resulting in a denial of service. This issue only
affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-25970)

It was discovered that ImageMagick incorrectly managed memory when handling
certain specially crafted image files. An attacker could possibly use this
issue to cause ImageMagick to consume resources, resulting in a denial of
service. (CVE-2026-25988)

It was discovered that ImageMagick incorrectly handled certain crafted image
profiles. An attacker could possibly use this issue to cause ImageMagick
to consume available resources, resulting in a denial of service.
(CVE-2026-26066)

It was discovered that ImageMagick incorrectly handled large image profiles
when encoding PNG images. An attacker could use this issue to cause
ImageMagick to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2026-30883)

Kamil Frankowicz discovered that ImageMagick incorrectly handled certain XML
data. An attacker could possibly use this issue to cause ImageMagick to crash,
resulting in a denial of service. (CVE-2026-32636)

Fixed packages 6

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS imagemagick 8:6.7.7.10-6ubuntu3.13+esm20
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS imagemagick 8:6.8.9.9-7ubuntu5.16+esm19
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS imagemagick 8:6.9.7.4+dfsg-16ubuntu6.15+esm11
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS imagemagick 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS imagemagick 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS imagemagick 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8

References

  • report
    https://ubuntu.com/security/CVE-2026-23952
  • report
    https://ubuntu.com/security/CVE-2026-25795
  • report
    https://ubuntu.com/security/CVE-2026-25796
  • report
    https://ubuntu.com/security/CVE-2026-25798
  • report
    https://ubuntu.com/security/CVE-2026-25799
  • report
    https://ubuntu.com/security/CVE-2026-25970
  • report
    https://ubuntu.com/security/CVE-2026-25988
  • report
    https://ubuntu.com/security/CVE-2026-26066
  • report
    https://ubuntu.com/security/CVE-2026-30883
  • report
    https://ubuntu.com/security/CVE-2026-32636