Skip to content
Critical ImageMagick Vulnerabilities Affect Ubuntu Users

Critical ImageMagick Vulnerabilities Affect Ubuntu Users

First seen 12 May 2026, 14:27 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 13, 2026 at 14:25 UTC
  • •ImageMagick vulnerabilities could lead to denial of service or code execution.
  • •Affected systems include Ubuntu 14.04 LTS and 25.10, with multiple CVEs reported.
  • •Users are urged to update their systems to the latest ImageMagick versions.

Multiple vulnerabilities were identified in ImageMagick, affecting Ubuntu systems, particularly 14.04 LTS and 25.10. Attackers could exploit these flaws by tricking users into opening specially crafted image files, potentially leading to denial of service or arbitrary code execution. The vulnerabilities include CVEs such as CVE-2026-24481, CVE-2026-24484, and CVE-2026-24485, all published on 2026-02-24. The issues primarily impact Ubuntu 14.04 LTS and 25.10, with older vulnerabilities also noted. Users are advised to update their systems to mitigate risks. The vulnerabilities were confirmed by Ubuntu security notices and are critical enough to warrant immediate attention.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 122d ago How this analysis works

Timeline

2018-08-21
CVE-2018-15607 published
A vulnerability in ImageMagick was disclosed, affecting image processing capabilities.
Linuxsecurity
2018-10-21
CVE-2018-18544 published
Another vulnerability in ImageMagick was identified, impacting image file handling.
Linuxsecurity
2019-07-01
CVE-2019-13137 published
A critical vulnerability in ImageMagick was disclosed, affecting multiple versions.
Linuxsecurity
2019-07-07
CVE-2019-13391 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
Multiple CVEs published
Several new vulnerabilities in ImageMagick were disclosed, including CVE-2026-24481, CVE-2026-24484, and CVE-2026-24485.
Ubuntu
2026-02-24
CVE-2026-25965 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25797 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25897 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-25638 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-02-24
CVE-2026-24481 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2018-15607 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (25)

1 / 2