Back Ubuntu

USN-8263-1: ImageMagick vulnerabilities

Ubuntu • May 11, 2026

It was discovered that ImageMagick incorrectly handled certain malformed image files in certain instances. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could possibly use these issues to cause a denial of service or possibly execute code. These issues only affected Ubuntu 14.04 LTS. ( CVE-2018-15607 , CVE-2018-18544 , CVE-2019-13137 , CVE-2019-13391 , CVE-2019-13391 ) It was discovered that ImageMagick incorrectly handled certain malformed image files in certain instances. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could possibly use these issues to cause a denial of service or possibly execute code. ( CVE-2026-24481 , CVE-2026-24484 , CVE-2026-24485 , CVE-2026-25576 , CVE-2026-25638 , CVE-2026-25797 , CVE-2026-25965 ) It was discovered that ImageMagick incorrectly handled certain malformed image files in certain instances. If a user or automated system using ImageMagick were tricked into opening a specifically crafted image, an attacker could possibly use these issues to cause a denial of service or possibly execute code. These issues only affected Ubuntu 25.10. ( CVE-2026-25637 , CVE-2026-25794 , CVE-2026-25795 , CVE-2026-25796 , CVE-2026-25797 , CVE-2026-25798 , CVE-2026-25799 , CVE-2026-25897 , CVE-2026-25898 )

In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical ImageMagick Vulnerabilities Affect Ubuntu Users Multiple vulnerabilities were identified in ImageMagick, affecting Ubuntu systems, particularly 14.04 LTS and 25.10. Attackers could exploit these flaws by tricking users into opening specially crafted image files, potentially leading to denial of service or arbitrary code execution. The vulnerabilities include CVEs such as CVE-2026-24481, CVE-2026-24484, and CVE-2026-24485, all published on 2026-02-24. The issues primarily impact Ubuntu 14.04 LTS and 25.10, with older vulnerabilities also noted. Users are advised to update their systems to mitigate risks. The vulnerabilities were confirmed by Ubuntu security notices and are critical enough to warrant immediate attention. 2 sources 74

USN-8263-1: ImageMagick vulnerabilities

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (19)