USN-8810-1: ImageMagick vulnerabilities
Ubuntu patched ImageMagick flaws that could cause denial of service or code execution.
Ubuntu Security Notice USN-8810-1 addresses ImageMagick memory-handling flaws affecting Ubuntu 14.04 LTS through 24.04 LTS. CVE-2026-33535 could allow an attacker to cause a denial of service. CVE-2026-33536, discovered by Kamil Frankowicz, could cause a denial of service or arbitrary code execution. The notice does not report observed exploitation.
- CVE-2026-33535 may let an attacker cause a denial of service
- CVE-2026-33536 may allow denial of service or arbitrary code execution
- Fixes cover Ubuntu 14.04 LTS through Ubuntu 24.04 LTS
- The notice does not report that the flaws are being exploited
- Vendors
- ImageMagick
- Products
- ImageMagickUbuntu
- Organizations
- Canonical
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-33535+1 related CVE | ImageMagick is free and open-source software used for editing and manipulating digital images | 5.5 group max | <1% |
From the original article
It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.