Skip to main content
VulnerabilityPublished 07/20/2026

imagemagick vulnerabilities

Affects imagemagickSource GCVE Database

0

Mentioned vulnerabilities

Fixed in 8:6.7.7.10-6ubuntu3.13+esm23 : update imagemagick when convenient.

Data as of 07/22/2026, 00:09:15 UTC

Severity
Unrated

Rated by Threat Radar

Patch
Available – fixed in 8:6.7.7.10-6ubuntu3.13+esm23, 8:6.8.9.9-7ubuntu5.16+esm22, 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 +4

What to do

Affected software

ProductAffectedFixed in
Ubuntu:Pro:14.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:6.7.7.10-6ubuntu3.13+esm23?arch=source&distro=esm-infra-legacy/trustyOther threatsAffected
  • <8:6.7.7.10-6ubuntu3.13+esm23
  • =8:6.7.7.10-5ubuntu3
  • =8:6.7.7.10-5ubuntu4
  • =8:6.7.7.10-6ubuntu1
  • =8:6.7.7.10-6ubuntu2
  • =8:6.7.7.10-6ubuntu3
  • =8:6.7.7.10-6ubuntu3.1
  • =8:6.7.7.10-6ubuntu3.2
  • =8:6.7.7.10-6ubuntu3.3
  • =8:6.7.7.10-6ubuntu3.4
  • =8:6.7.7.10-6ubuntu3.5
  • =8:6.7.7.10-6ubuntu3.6
  • =8:6.7.7.10-6ubuntu3.7
  • =8:6.7.7.10-6ubuntu3.8
  • =8:6.7.7.10-6ubuntu3.9
  • =8:6.7.7.10-6ubuntu3.11
  • =8:6.7.7.10-6ubuntu3.12
  • =8:6.7.7.10-6ubuntu3.13
  • =8:6.7.7.10-6ubuntu3.13+esm1
  • =8:6.7.7.10-6ubuntu3.13+esm2
  • =8:6.7.7.10-6ubuntu3.13+esm3
  • =8:6.7.7.10-6ubuntu3.13+esm4
  • =8:6.7.7.10-6ubuntu3.13+esm5
  • =8:6.7.7.10-6ubuntu3.13+esm6
  • =8:6.7.7.10-6ubuntu3.13+esm7
  • =8:6.7.7.10-6ubuntu3.13+esm8
  • =8:6.7.7.10-6ubuntu3.13+esm9
  • =8:6.7.7.10-6ubuntu3.13+esm10
  • =8:6.7.7.10-6ubuntu3.13+esm11
  • =8:6.7.7.10-6ubuntu3.13+esm12
  • =8:6.7.7.10-6ubuntu3.13+esm13
  • =8:6.7.7.10-6ubuntu3.13+esm14
  • =8:6.7.7.10-6ubuntu3.13+esm15
  • =8:6.7.7.10-6ubuntu3.13+esm16
  • =8:6.7.7.10-6ubuntu3.13+esm17
  • =8:6.7.7.10-6ubuntu3.13+esm18
  • =8:6.7.7.10-6ubuntu3.13+esm19
  • =8:6.7.7.10-6ubuntu3.13+esm20
  • =8:6.7.7.10-6ubuntu3.13+esm21
  • =8:6.7.7.10-6ubuntu3.13+esm22
Fixed in
  • 8:6.7.7.10-6ubuntu3.13+esm23
Ubuntu:Pro:16.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:6.8.9.9-7ubuntu5.16+esm22?arch=source&distro=esm-infra-legacy/xenialOther threatsAffected
  • <8:6.8.9.9-7ubuntu5.16+esm22
  • =8:6.8.9.9-5ubuntu2
  • =8:6.8.9.9-6
  • =8:6.8.9.9-6build1
  • =8:6.8.9.9-7
  • =8:6.8.9.9-7ubuntu1
  • =8:6.8.9.9-7ubuntu2
  • =8:6.8.9.9-7ubuntu3
  • =8:6.8.9.9-7ubuntu4
  • =8:6.8.9.9-7ubuntu5
  • =8:6.8.9.9-7ubuntu5.1
  • =8:6.8.9.9-7ubuntu5.2
  • =8:6.8.9.9-7ubuntu5.3
  • =8:6.8.9.9-7ubuntu5.4
  • =8:6.8.9.9-7ubuntu5.5
  • =8:6.8.9.9-7ubuntu5.6
  • =8:6.8.9.9-7ubuntu5.7
  • =8:6.8.9.9-7ubuntu5.8
  • =8:6.8.9.9-7ubuntu5.9
  • =8:6.8.9.9-7ubuntu5.11
  • =8:6.8.9.9-7ubuntu5.12
  • =8:6.8.9.9-7ubuntu5.13
  • =8:6.8.9.9-7ubuntu5.14
  • =8:6.8.9.9-7ubuntu5.15
  • =8:6.8.9.9-7ubuntu5.16
  • =8:6.8.9.9-7ubuntu5.16+esm1
  • =8:6.8.9.9-7ubuntu5.16+esm2
  • =8:6.8.9.9-7ubuntu5.16+esm3
  • =8:6.8.9.9-7ubuntu5.16+esm4
  • =8:6.8.9.9-7ubuntu5.16+esm5
  • =8:6.8.9.9-7ubuntu5.16+esm6
  • =8:6.8.9.9-7ubuntu5.16+esm7
  • =8:6.8.9.9-7ubuntu5.16+esm8
  • =8:6.8.9.9-7ubuntu5.16+esm9
  • =8:6.8.9.9-7ubuntu5.16+esm10
  • =8:6.8.9.9-7ubuntu5.16+esm11
  • =8:6.8.9.9-7ubuntu5.16+esm12
  • =8:6.8.9.9-7ubuntu5.16+esm13
  • =8:6.8.9.9-7ubuntu5.16+esm14
  • =8:6.8.9.9-7ubuntu5.16+esm15
  • =8:6.8.9.9-7ubuntu5.16+esm16
  • =8:6.8.9.9-7ubuntu5.16+esm17
  • =8:6.8.9.9-7ubuntu5.16+esm18
  • =8:6.8.9.9-7ubuntu5.16+esm19
  • =8:6.8.9.9-7ubuntu5.16+esm20
  • =8:6.8.9.9-7ubuntu5.16+esm21
Fixed in
  • 8:6.8.9.9-7ubuntu5.16+esm22
Ubuntu:Pro:18.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15+esm14?arch=source&distro=esm-infra/bionicOther threatsAffected
  • <8:6.9.7.4+dfsg-16ubuntu6.15+esm14
  • =8:6.9.7.4+dfsg-16ubuntu2
  • =8:6.9.7.4+dfsg-16ubuntu3
  • =8:6.9.7.4+dfsg-16ubuntu4
  • =8:6.9.7.4+dfsg-16ubuntu5
  • =8:6.9.7.4+dfsg-16ubuntu6
  • =8:6.9.7.4+dfsg-16ubuntu6.2
  • =8:6.9.7.4+dfsg-16ubuntu6.3
  • =8:6.9.7.4+dfsg-16ubuntu6.4
  • =8:6.9.7.4+dfsg-16ubuntu6.7
  • =8:6.9.7.4+dfsg-16ubuntu6.8
  • =8:6.9.7.4+dfsg-16ubuntu6.9
  • =8:6.9.7.4+dfsg-16ubuntu6.11
  • =8:6.9.7.4+dfsg-16ubuntu6.12
  • =8:6.9.7.4+dfsg-16ubuntu6.13
  • =8:6.9.7.4+dfsg-16ubuntu6.14
  • =8:6.9.7.4+dfsg-16ubuntu6.15
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm1
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm2
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm3
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm4
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm5
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm6
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm7
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm8
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm9
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm10
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm11
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm12
  • =8:6.9.7.4+dfsg-16ubuntu6.15+esm13
Fixed in
  • 8:6.9.7.4+dfsg-16ubuntu6.15+esm14
Ubuntu:Pro:20.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12?arch=source&distro=esm-apps/focalOther threatsAffected
  • <8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12
  • =8:6.9.10.23+dfsg-2.1ubuntu3
  • =8:6.9.10.23+dfsg-2.1ubuntu8
  • =8:6.9.10.23+dfsg-2.1ubuntu9
  • =8:6.9.10.23+dfsg-2.1ubuntu10
  • =8:6.9.10.23+dfsg-2.1ubuntu11
  • =8:6.9.10.23+dfsg-2.1ubuntu11.1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.2
  • =8:6.9.10.23+dfsg-2.1ubuntu11.4
  • =8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.5
  • =8:6.9.10.23+dfsg-2.1ubuntu11.6
  • =8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.7
  • =8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.9
  • =8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2
  • =8:6.9.10.23+dfsg-2.1ubuntu11.10
  • =8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10
  • =8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11
Fixed in
  • 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12
Ubuntu:Pro:22.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12?arch=source&distro=esm-apps/jammyOther threatsAffected
  • <8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12
  • =8:6.9.11.60+dfsg-1ubuntu1
  • =8:6.9.11.60+dfsg-1.3
  • =8:6.9.11.60+dfsg-1.3build1
  • =8:6.9.11.60+dfsg-1.3build2
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10
  • =8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11
Fixed in
  • 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12
Ubuntu:Pro:24.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11?arch=source&distro=esm-apps/nobleOther threatsAffected
  • <8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
  • =8:6.9.11.60+dfsg-1.6ubuntu1
  • =8:6.9.12.98+dfsg1-5
  • =8:6.9.12.98+dfsg1-5.2build1
  • =8:6.9.12.98+dfsg1-5.2build2
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9
  • =8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10
Fixed in
  • 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11
Ubuntu:Pro:26.04:LTSimagemagickpkg:deb/ubuntu/imagemagick@8:7.1.2.18+dfsg1-1ubuntu0.1~esm1?arch=source&distro=esm-apps/resoluteOther threatsAffected
  • <8:7.1.2.18+dfsg1-1ubuntu0.1~esm1
  • =8:7.1.2.3+dfsg1-1
  • =8:7.1.2.8+dfsg1-1
  • =8:7.1.2.12+dfsg1-1
  • =8:7.1.2.13+dfsg1-1
  • =8:7.1.2.15+dfsg1-1
  • =8:7.1.2.16+dfsg1-1
  • =8:7.1.2.18+dfsg1-1
Fixed in
  • 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use this issue to cause a stack overflow, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-68950) It was discovered that the ImageMagick MSL coder destroyed a cloned image twice when an MSL script failed. An attacker could possibly use this issue to cause a use-after-free, resulting in a denial of service, or arbitrary code execution. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-28688) It was discovered that the ImageMagick VIFF image encoder did not properly validate the packet count, leading to an integer overflow on 32-bit systems. An attacker could possibly use this issue to cause an out-of- bounds heap write, resulting in a denial of service. (CVE-2026-33900) It was discovered that ImageMagick did not properly handle the column offset when sampling an image. An attacker could possibly use this issue to cause ImageMagick to read out of bounds, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-33905)

References

Community reviews

Loading reviews…