{"schemaVersion":3,"id":"USN-8810-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"imagemagick vulnerabilities\n\nIt was discovered that ImageMagick did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause\na denial of service. This issue affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS\nand Ubuntu 24.04 LTS. (CVE-2026-33535)\n\nKamil Frankowicz discovered that ImageMagick did not correctly handle\ncertain memory operations. An attacker could possibly use this issue to\ncause a denial of service or execute arbitrary code. This issue affected\nUbuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-33536)\n\nIt was discovered that ImageMagick did not correctly handle certain\ninteger arithmetic. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. (CVE-2026-34238)\n\nJake Lamberson discovered that ImageMagick did not correctly handle\ncertain memory operations. An attacker could possibly use this issue to\ncause a denial of service or execute arbitrary code. This issue affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40310)\n\nJunmin Zhu discovered that ImageMagick did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to cause a\ndenial of service. This issue affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40311)\n\nIt was discovered that ImageMagick did not correctly handle opening\ncertain MSL files. If a user or automated system were tricked into\nopening a specially crafted file, an attacker could possibly cause a\ndenial of service. This issue affected Ubuntu 26.04 LTS. (CVE-2026-40312)\n\nIt was discovered that ImageMagick did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to execute\narbitrary code. (CVE-2026-56361)","dates":{"published":"2026-09-24T00:20:47.000Z","modified":"2026-09-24T13:12:30.527Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"imagemagick","name":"imagemagick","label":"imagemagick","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/imagemagick","purlType":"deb","versions":[{"text":"< 8:6.7.7.10-6ubuntu3.13+esm26","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.8.9.9-7ubuntu5.16+esm25","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.7.4+dfsg-16ubuntu6.15+esm17","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15","noFixRecorded":false,"fixedIn":null},{"text":"< 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14","noFixRecorded":false,"fixedIn":null},{"text":"< 8:7.1.2.18+dfsg1-1ubuntu0.1~esm3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8:6.7.7.10-6ubuntu3.13+esm26 | < 8:6.8.9.9-7ubuntu5.16+esm25 | < 8:6.9.7.4+dfsg-16ubuntu6.15+esm17 | < 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15 | < 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15 | < 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14 | < 8:7.1.2.18+dfsg1-1ubuntu0.1~esm3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8810-1","label":"ubuntu.com/security/notices/USN-8810-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-33535","label":"ubuntu.com/security/CVE-2026-33535","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-33536","label":"ubuntu.com/security/CVE-2026-33536","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-34238","label":"ubuntu.com/security/CVE-2026-34238","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-40310","label":"ubuntu.com/security/CVE-2026-40310","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-40311","label":"ubuntu.com/security/CVE-2026-40311","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-40312","label":"ubuntu.com/security/CVE-2026-40312","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-56361","label":"ubuntu.com/security/CVE-2026-56361","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-33535","CVE-2026-33536","CVE-2026-34238","CVE-2026-40310","CVE-2026-40311","CVE-2026-40312","CVE-2026-56361"],"downstream":[],"duplicates":[],"related":["CVE-2026-33535","CVE-2026-33536","CVE-2026-34238","CVE-2026-40310","CVE-2026-40311","CVE-2026-40312","CVE-2026-56361"]},"timeline":[{"kind":"published","date":"2026-09-24T00:20:47.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-24T13:12:30.527Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:49:38.929Z","stale":false,"partial":false}}