Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
ImageMagick may crash or exhaust memory
published 4 months ago
Summary
The ImageMagick graphics program can be forced to write beyond its memory buffer, accept images with zero size, or request more memory than allowed, which could cause crashes or slowdowns. This affects all ImageMagick packages from Canonical. Updating to the latest patched version resolves the issue.
What to do
- Update canonical imagemagick to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical imagemagick-6-common to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical imagemagick-6-doc to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical imagemagick-6.q16 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical imagemagick-6.q16hdri to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical imagemagick-common to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical imagemagick-doc to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libimage-magick-perl to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libimage-magick-q16-perl to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libimage-magick-q16hdri-perl to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagick++-6-headers to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagick++-6.q16-8 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagick++-6.q16-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagick++-6.q16hdri-8 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagick++-6.q16hdri-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagick++-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6-arch-config to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6-headers to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6.q16-6 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6.q16-6-extra to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6.q16-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6.q16hdri-6 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6.q16hdri-6-extra to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-6.q16hdri-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickcore-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickwand-6-headers to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickwand-6.q16-6 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickwand-6.q16-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickwand-6.q16hdri-6 to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickwand-6.q16hdri-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical libmagickwand-dev to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
- Update canonical perlmagick to version 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick-6-common |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick-6-doc |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick-6.q16 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick-6.q16hdri |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick-common |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | imagemagick-doc |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libimage-magick-perl |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libimage-magick-q16-perl |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libimage-magick-q16hdri-perl |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagick++-6-headers |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagick++-6.q16-8 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagick++-6.q16-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagick++-6.q16hdri-8 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagick++-6.q16hdri-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagick++-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6-arch-config |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6-headers |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6.q16-6 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6.q16-6-extra |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6.q16-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6.q16hdri-6 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6.q16hdri-6-extra |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-6.q16hdri-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickcore-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickwand-6-headers |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickwand-6.q16-6 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickwand-6.q16-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickwand-6.q16hdri-6 |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickwand-6.q16hdri-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | libmagickwand-dev |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
| TuxCare:Ubuntu:20.04 | canonical | perlmagick |
< 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29 Fix: upgrade to 8:6.9.10.23+dfsg-2.1ubuntu11.11+tuxcare.els29
|
Original advisory text
Fix CVE(s): CVE-2026-46559, CVE-2026-49218, CVE-2026-53460
* SECURITY UPDATE: Heap buffer over-write in the JP2 encoder via jp2:quality
and jp2:rate options
- debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate
parse loops by the tcp_distoratio/tcp_rates array extent in
WriteJP2Image() in coders/jp2.c
- CVE-2026-46559
* SECURITY UPDATE: Invalid image dimensions in the DCM decoder leading to
crashes in later operations
- debian/patches/CVE-2026-49218.patch: reject an image with zero rows or
columns at the end of ReadDCMImage() in coders/dcm.c
- CVE-2026-49218
* SECURITY UPDATE: Out-of-memory condition via missing maximum memory request
check in AcquireAlignedMemory
- debian/patches/CVE-2026-53460.patch: reject allocation sizes greater than
GetMaxMemoryRequest() in AcquireAlignedMemory() in magick/memory.c
- CVE-2026-53460
and jp2:rate options
- debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate
parse loops by the tcp_distoratio/tcp_rates array extent in
WriteJP2Image() in coders/jp2.c
- CVE-2026-46559
* SECURITY UPDATE: Invalid image dimensions in the DCM decoder leading to
crashes in later operations
- debian/patches/CVE-2026-49218.patch: reject an image with zero rows or
columns at the end of ReadDCMImage() in coders/dcm.c
- CVE-2026-49218
* SECURITY UPDATE: Out-of-memory condition via missing maximum memory request
check in AcquireAlignedMemory
- debian/patches/CVE-2026-53460.patch: reject allocation sizes greater than
GetMaxMemoryRequest() in AcquireAlignedMemory() in magick/memory.c
- CVE-2026-53460
References
- https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1782139676.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-46559 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-49218 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53460 Vendor Advisory
Timeline
Published22 Jun 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1782139676 · OSV
Track software like this
Free during beta