Advisorymedium
USN-8739-2: ImageMagick vulnerabilities
AI summary · glm-5.3Summaries by Vani AI
Ubuntu releases USN-8739-2, extending ImageMagick fixes for four CVEs including possible arbitrary code execution to Ubuntu 24.04 LTS.
USN-8739-2 provides the ImageMagick fixes from USN-8739-1 for Ubuntu 24.04 LTS. The flaws stem from incorrect handling of certain images that could allow an attacker to cause a denial of service or possibly execute arbitrary code. The affected CVEs are CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, and CVE-2026-56373.
Key facts
- Fixes four ImageMagick CVEs for Ubuntu 24.04 LTS
- Crafted images could cause denial of service or arbitrary code execution
- Follows earlier USN-8739-1 covering older Ubuntu releases
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-56373+1 related CVE | ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails | 6.3 group max | <1% | ||
| CVE-2026-56368 | ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed | 6.3 | <1% | ||
| CVE-2026-56371 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes | 6.9 | <1% |
From the original article
USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24. 04 LTS.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.