USN-8810-1: ImageMagick vulnerabilities
Ubuntu patched ImageMagick flaws that could cause denial of service or code execution.
34
Vendor
ImageMagick
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenSep 8, 2026
- Last mentionedSep 24, 2026
Timeline
6 articles · newest firstHEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise
Hacktron's "HEIF Heist" research shows memory-unsafe HEIF/AVIF parsers enable RCE and data leaks in Slack, Meta, GitHub Enterprise, and OpenAI.
78
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Researchers chained a libheif RCE in Discourse with an over-privileged OpenAI forum sign-in token flaw to take over ChatGPT and Codex accounts.
72
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories
Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.
70
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
78
USN-8739-1: ImageMagick vulnerabilities
Canonical released USN-8739-1 fixing five ImageMagick flaws that could cause denial of service or arbitrary code execution.
25
Related CVEs
by mentions- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
- CVE-2026-32882<1%7.1libheif is a HEIF and AVIF file format decoder and encoder
- CVE-2026-56371<1%6.9ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes
- CVE-2026-56368<1%6.3ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed
- CVE-2026-56373<1%6.3ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails
- CVE-2026-33535<1%5.5ImageMagick is free and open-source software used for editing and manipulating digital images
- CVE-2026-56370<1%4.8ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with…
- CVE-2026-56366<1%4.8ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths
- CVE-2026-33536<1%4.7ImageMagick is free and open-source software used for editing and manipulating digital images
Appears with
- Discoursevendor · 4
- Hacktronorganization · 4
- OpenAIvictim · 4
- libheifproduct · 4
- OpenAIvendor · 4
- ChatGPTproduct · 3
- ImageMagickproduct · 3
- Claude Opus 4.8ai model · 3
- Claude Opus 5ai model · 3
- Anthropicvendor · 2
- Claude Opus 4.8product · 2
- Bugcrowdorganization · 2
- Discourseproduct · 2
- Debianvendor · 2
- Ubuntuproduct · 2
- GitHubvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.