Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558

Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges ×

Several security issues were fixed in ImageMagick. Software Description: - imagemagick: Image manipulation programs and library Details: It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use this issue to cause a stack overflow, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-68950) It was discovered that the ImageMagick MSL coder destroyed a cloned image twice when an MSL script failed. An attacker could possibly use this issue to cause a use-after-free, resulting in a denial of service, or arbitrary code execution. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-28688) It was discovered that the ImageMagick VIFF image encoder did not properly validate the packet count, leading to an in... Read the Full Advisory

Several security issues were fixed in ImageMagick.

Software Description:

- imagemagick: Image manipulation programs and library

It was discovered that ImageMagick did not limit mutual references between

MVG files. An attacker could possibly use this issue to cause a stack

overflow, resulting in a denial of service. This issue only affected Ubuntu

14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu

22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-68950)

It was discovered that the ImageMagick MSL coder destroyed a cloned image

twice when an MSL script failed. An attacker could possibly use this issue

to cause a use-after-free, resulting in a denial of service, or arbitrary

code execution. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04

LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04

LTS. (CVE-2026-28688)

It was discovered that the ImageMagick VIFF image encoder did not properly

validate the packet count, leading to an in...

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS imagemagick-7-common 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro imagemagick-7.q16 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro imagemagick-7.q16hdri 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libimage-magick-q16-perl 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16-5 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16hdri-5 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagick++-7.q16hdri-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7-arch-config 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16-10-extra 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16hdri-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16hdri-10-extra 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickcore-7.q16hdri-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7-headers 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16hdri-10 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libmagickwand-7.q16hdri-dev 8:7.1.2.18+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS imagemagick-6-common 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16-9t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16hdri-9t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16-7-extra 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16hdri-7-extra 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16hdri-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6-headers 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16hdri-7t64 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11 Available with Ubuntu Pro Ubuntu 22.04 LTS imagemagick-6-common 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16-8 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-8 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6-arch-config 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6-extra 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-6 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12 Available with Ubuntu Pro Ubuntu 20.04 LTS imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16-8 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-8 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12 Available with Ubuntu Pro Ubuntu 18.04 LTS imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagick++-6.q16hdri-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickcore-6.q16hdri-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro libmagickwand-6.q16hdri-dev 8:6.9.7.4+dfsg-16ubuntu6.15+esm14 Available with Ubuntu Pro Ubuntu 16.04 LTS imagemagick-6.q16 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro imagemagick-common 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libimage-magick-q16-perl 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagick++-6.q16-5v5 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagick++-6.q16-dev 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickcore-6.q16-2 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickcore-6.q16-2-extra 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickcore-6.q16-dev 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickwand-6.q16-2 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro libmagickwand-6.q16-dev 8:6.8.9.9-7ubuntu5.16+esm22 Available with Ubuntu Pro Ubuntu 14.04 LTS imagemagick 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro imagemagick-common 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagick++-dev 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagick++5 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickcore-dev 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickcore5 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickcore5-extra 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickwand-dev 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro libmagickwand5 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro perlmagick 8:6.7.7.10-6ubuntu3.13+esm23 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2025-68950, CVE-2026-28688, CVE-2026-33900, CVE-2026-33905

Ubuntu Security Notice USN-8558-1

Get the latest Linux and open source security news straight to your inbox.