Summary
It was discovered that ImageMagick did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause
a denial of service. This issue affected Ubuntu 14.04 LTS,
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS
and Ubuntu 24.04 LTS. (CVE-2026-33535)
Kamil Frankowicz discovered that ImageMagick did not correctly handle
certain memory operations. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. This issue affected
Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-33536)
It was discovered that ImageMagick did not correctly handle certain
integer arithmetic. An attacker could possibly use this issue to cause
a denial of service or execute arbitrary code. (CVE-2026-34238)
Jake Lamberson discovered that ImageMagick did not correctly handle
certain memory operations. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. This issue affected
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40310)
Junmin Zhu discovered that ImageMagick did not correctly handle certain
memory operations. An attacker could possibly use this issue to cause a
denial of service. This issue affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40311)
It was discovered that ImageMagick did not correctly handle opening
certain MSL files. If a user or automated system were tricked into
opening a specially crafted file, an attacker could possibly cause a
denial of service. This issue affected Ubuntu 26.04 LTS. (CVE-2026-40312)
It was discovered that ImageMagick did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code. (CVE-2026-56361)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.13+esm26 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.16+esm25 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.15+esm17 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | imagemagick | 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | imagemagick | 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | imagemagick | 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | imagemagick | 8:7.1.2.18+dfsg1-1ubuntu0.1~esm3 |
Vulnerabilities 7
-
Medium 6.2
ImageMagick: Off-by-One in MSL decoder could result in crash
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.…
-
Medium 5.5
ImageMagick: Heap out-of-bounds write in JP2 encoder
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the JP2 encoder with when a user specifies an invalid sampling index. This issue h…
-
Medium 5.5
ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profil…
-
Medium 5.1
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and th…
-
Medium 5.1
ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an …
-
Medium 4.0
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash. Versions 7.1.2-18 an…
-
Low 3.3
ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing
ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations.
References
-
report
https://ubuntu.com/security/CVE-2026-33535
-
report
https://ubuntu.com/security/CVE-2026-33536
-
report
https://ubuntu.com/security/CVE-2026-34238
-
report
https://ubuntu.com/security/CVE-2026-40310
-
report
https://ubuntu.com/security/CVE-2026-40311
-
report
https://ubuntu.com/security/CVE-2026-40312
-
report
https://ubuntu.com/security/CVE-2026-56361