Known vulnerabilities in imagemagick (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:imagemagick_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 145
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting imagemagick (Ubuntu package) imagemagick (Ubuntu package) is affected by 145 known vulnerabilities: 30 high, 86 medium, 29 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124052 - Heap-based Buffer Overflow
CVE-2026-32636
CWE-122 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 17.03.2026 SB2026031710
SB2026032772
SB2026032773
and 12 more
#VU123958 - Heap-based Buffer Overflow
CVE-2026-30883
CWE-122 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 12.03.2026 SB2026031159
SB20260320119
SB2026040101
and 13 more
#VU123604 - NULL Pointer Dereference
CVE-2026-25798
CWE-476 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 06.03.2026 SB2026030565
SB2026030639
SB2026030640
and 12 more
#VU123603 - Divide By Zero
CVE-2026-25799
CWE-369 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 06.03.2026 SB2026030565
SB2026030639
SB2026030640
and 14 more
#VU123601 - Missing release of memory after effective lifetime
CVE-2026-25988
CWE-401 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 06.03.2026 SB2026030565
SB2026030639
SB2026030640
and 12 more
#VU123600 - Stack-based buffer overflow
CVE-2026-25968
CWE-121 High
No
No
8:6.7.7.10-6ubuntu3.13+esm19, 8:6.8.9.9-7ubuntu5.16+esm18, 8:6.9.7.4+dfsg-16ubuntu6.15+esm10, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7 06.03.2026 SB2026030565
SB2026030625
SB2026030639
and 10 more
#VU123599 - Missing release of memory after effective lifetime
CVE-2026-25638
CWE-401 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 06.03.2026 SB2026030565
SB2026030639
SB2026030640
and 10 more
#VU123584 - Integer overflow
CVE-2026-25970
CWE-190 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 11 more
#VU123578 - Out-of-bounds read
CVE-2026-25576
CWE-125 Low
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 12 more
#VU123572 - Resource exhaustion
CVE-2026-24485
CWE-400 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 05.03.2026 SB2026030565
SB2026030639
SB2026030640
and 12 more
#VU123259 - Resource exhaustion
CVE-2026-26066
CWE-400 Low
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 12 more
#VU123255 - Heap-based Buffer Overflow
CVE-2026-25897
CWE-122 High
No
No
8:6.7.7.10-6ubuntu3.13+esm19, 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm18, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm10, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030625
SB2026030957
and 5 more
#VU123254 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-25797
CWE-94 High
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 14 more
#VU123249 - Out-of-bounds read
CVE-2026-25898
CWE-125 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm19, 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm18, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm10, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030625
SB2026030639
and 11 more
#VU123248 - Heap-based Buffer Overflow
CVE-2026-25794
CWE-122 High
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 6 more
#VU123231 - Missing release of memory after effective lifetime
CVE-2026-25796
CWE-401 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 14 more
#VU123229 - NULL Pointer Dereference
CVE-2026-25795
CWE-476 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 12 more
#VU123227 - Missing release of memory after effective lifetime
CVE-2026-25637
CWE-401 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 10 more
#VU123226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-25965
CWE-22 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm21, 8:6.8.9.9-7ubuntu5.16+esm20, 8:6.9.7.4+dfsg-16ubuntu6.15+esm12, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9, 8:7.1.2.3+dfsg1-1ubuntu0.1 25.02.2026 SB2026022540
SB2026030639
SB2026030640
and 11 more
#VU121669 - NULL Pointer Dereference
CVE-2026-23952
CWE-476 Medium
No
No
8:6.7.7.10-6ubuntu3.13+esm20, 8:6.8.9.9-7ubuntu5.16+esm19, 8:6.9.7.4+dfsg-16ubuntu6.15+esm11, 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9, 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9, 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8 20.01.2026 SB2026012004
SB2026012343
SB2026012344
and 11 more


Showing elements 21 - 40 out of 145