{"schemaVersion":3,"id":"USN-8007-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"imagemagick vulnerabilities\n\nIt was discovered that ImageMagick incorrectly handled image depth values\nwhen processing MIFF image files. An attacker could use this issue to cause\na denial of service or possibly execute arbitrary code. (CVE-2025-43965)\n\nIt was discovered that ImageMagick incorrectly processed SVG images and\nMSL files. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2025-68618)\n\nIt was discovered that ImageMagick incorrectly handled memory when\nconverting MVG files. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2025-69204)","dates":{"published":"2026-02-03T10:05:40.000Z","modified":"2026-06-25T13:32:31.775Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"imagemagick","name":"imagemagick","label":"imagemagick","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/imagemagick","purlType":"deb","versions":[{"text":"< 8:6.7.7.10-6ubuntu3.13+esm17","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.8.9.9-7ubuntu5.16+esm16","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.7.4+dfsg-16ubuntu6.15+esm8","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8:6.7.7.10-6ubuntu3.13+esm17 | < 8:6.8.9.9-7ubuntu5.16+esm16 | < 8:6.9.7.4+dfsg-16ubuntu6.15+esm8 | < 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6 | < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6 | < 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8007-1","label":"ubuntu.com/security/notices/USN-8007-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-43965","label":"ubuntu.com/security/CVE-2025-43965","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-68618","label":"ubuntu.com/security/CVE-2025-68618","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-69204","label":"ubuntu.com/security/CVE-2025-69204","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CVE-2025-43965","CVE-2025-68618","CVE-2025-69204"]},"timeline":[{"kind":"published","date":"2026-02-03T10:05:40.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:31.775Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:04:22.767Z","stale":false,"partial":false}}