Critical ImageMagick Vulnerabilities Affect Ubuntu Users

Critical ImageMagick Vulnerabilities Affect Ubuntu Users

First seen 12 May 2026, 14:27 UTC UbuntuLinuxsecurity 95% similarity 74.0

Article Content

Browse articles
ThreatCluster

Multiple vulnerabilities were identified in ImageMagick, affecting Ubuntu systems, particularly 14.04 LTS and 25.10. Attackers could exploit these flaws by tricking users into opening specially crafted image files, potentially leading to denial of service or arbitrary code execution. The vulnerabilities include CVEs such as CVE-2026-24481, CVE-2026-24484, and CVE-2026-24485, all published on 2026-02-24. The issues primarily impact Ubuntu 14.04 LTS and 25.10, with older vulnerabilities also noted. Users are advised to update their systems to mitigate risks. The vulnerabilities were confirmed by Ubuntu security notices and are critical enough to warrant immediate attention.

Key Points: • ImageMagick vulnerabilities could lead to denial of service or code execution. • Affected systems include Ubuntu 14.04 LTS and 25.10, with multiple CVEs reported. • Users are urged to update their systems to the latest ImageMagick versions.

ThreatCluster AI

Timeline

2018-08-21
CVE-2018-15607 published
A vulnerability in ImageMagick was disclosed, affecting image processing capabilities.
Linuxsecurity
2018-10-21
CVE-2018-18544 published
Another vulnerability in ImageMagick was identified, impacting image file handling.
Linuxsecurity
2019-07-01
CVE-2019-13137 published
A critical vulnerability in ImageMagick was disclosed, affecting multiple versions.
Linuxsecurity
2019-07-07
CVE-2019-13391 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
Multiple CVEs published
Several new vulnerabilities in ImageMagick were disclosed, including CVE-2026-24481, CVE-2026-24484, and CVE-2026-24485.
Ubuntu
2026-02-24
CVE-2026-25965 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25797 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25897 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25638 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-24481 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

Community

Browse all →

Tracked Entities in This Story