USN-8859-1: ImageMagick vulnerabilities
Ubuntu patches ImageMagick flaws that could let attackers cause denial of service or leak information.
Ubuntu Security Notice USN-8859-1 covers ImageMagick flaws in handling certain images. CVE-2026-56367 could allow denial of service or disclosure of sensitive information on Ubuntu 16.04, 18.04, 20.04, 22.04, and 24.04 LTS. CVE-2026-93586 could cause denial of service. A further local denial-of-service issue affects Ubuntu 20.04 LTS and 22.04 LTS, but the notice text is cut off before naming that CVE. No active exploitation is reported.
- CVE-2026-56367 may cause denial of service or information disclosure.
- That issue affects Ubuntu 16.04 through 24.04 LTS.
- CVE-2026-93586 may cause denial of service via crafted images.
- A separate local denial-of-service issue is described, but its CVE is truncated.
Vulnerabilities mentionedAll →
- CVE-2026-563676.3<1%ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c)…published · imagemagick imagemagick
- CVE-2026-935862.1—ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated…published
It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-56367) It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-93586) It was discovered that ImageMagick did not correctly handle certain images. A local attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04…
This source does not provide full text. Read it at ubuntu.com.