USN-8592-1: imagemagick vulnerabilities

Q: Which Ubuntu releases are affected by the wavelet-denoise issue?

CVE-2026-30936 affects Ubuntu 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS. Exploitation involves processing certain images with the wavelet-denoise operation and may result in arbitrary code execution.

Q: Are 32-bit deployments uniquely exposed to any of these issues?

Yes. CVE-2026-31853 affects handling of extremely large SFW images on 32-bit systems and can cause an integer overflow leading to denial of service.

Q: What image inputs or operations should be treated as higher risk?

The advisory identifies certain images processed with wavelet-denoise, extremely large XWD images, extremely large SFW images on 32-bit systems, and use of the sixel encoder when memory allocation fails. The wavelet-denoise, XWD, and sixel issues may result in arbitrary code execution.

Q: Which releases are affected by the sixel encoder issue?

CVE-2026-32259 affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS. It involves memory allocation failures in the sixel encoder that can trigger a stack buffer overflow and potentially allow arbitrary code execution.

Published Aug 10, 2026

Updated

Hao Ren discovered that ImageMagick incorrectly handled certain images when using the wavelet-denoise operation. An attacker could possibly use this issue to trigger an out-of-bounds heap write, resulting in arbitrary code execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-30936)

It was discovered that ImageMagick incorrectly handled extremely large XWD images. An attacker could possibly use this issue to trigger an out-of-bounds heap write, resulting in arbitrary code execution. (CVE-2026-30937)

It was discovered that ImageMagick incorrectly handled extremely large SFW images on 32-bit systems. An attacker could possibly use this issue to trigger an integer overflow, resulting in a denial of service. (CVE-2026-31853)

It was discovered that ImageMagick incorrectly handled memory allocation failures in the sixel encoder. An attacker could possibly use this issue to trigger a stack buffer overflow, resulting in arbitrary code execution. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-32259)

Affected Software

123 affected componentsFixes available

ImageMagick ImageMagick

ubuntu/imagemagick<8:6.7.7.10-6ubuntu3.13+esm24

8:6.7.7.10-6ubuntu3.13+esm24

ubuntu/imagemagick<8:6.8.9.9-7ubuntu5.16+esm23

8:6.8.9.9-7ubuntu5.16+esm23

ubuntu/imagemagick<8:6.9.7.4+dfsg-16ubuntu6.15+esm15

8:6.9.7.4+dfsg-16ubuntu6.15+esm15

ubuntu/imagemagick<8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13

ubuntu/imagemagick<8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13

ubuntu/imagemagick<8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12

All of the following

ubuntu/imagemagick<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/imagemagick-6.q16<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/imagemagick-6.q16hdri<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libimage-magick-q16-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libimage-magick-q16hdri-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagick++-6.q16-9t64<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagick++-6.q16hdri-9t64<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagickcore-6.q16-7-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagickcore-6.q16-7t64<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagickcore-6.q16hdri-7-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagickcore-6.q16hdri-7t64<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagickwand-6.q16-7t64<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/libmagickwand-6.q16hdri-7t64<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=24.04

All of the following

ubuntu/imagemagick<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/imagemagick-6.q16<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/imagemagick-6.q16hdri<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libimage-magick-q16-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libimage-magick-q16hdri-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagick++-6.q16-8<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagick++-6.q16hdri-8<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagickcore-6.q16-6<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagickcore-6.q16-6-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagickcore-6.q16hdri-6<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagickcore-6.q16hdri-6-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagickwand-6.q16-6<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libmagickwand-6.q16hdri-6<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=22.04

All of the following

ubuntu/imagemagick<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libimage-magick-q16-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libimage-magick-q16hdri-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libmagickcore-6.q16-6-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libmagickcore-6.q16hdri-6-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libmagickwand-6.q16-6<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libmagickwand-6.q16hdri-6<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/imagemagick-6.q16<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/imagemagick-6.q16hdri<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libimage-magick-q16-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libimage-magick-q16hdri-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagick++-6.q16-7<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagick++-6.q16hdri-7<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagickcore-6.q16-3<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagickcore-6.q16-3-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagickcore-6.q16hdri-3<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagickcore-6.q16hdri-3-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagickwand-6.q16-3<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libmagickwand-6.q16hdri-3<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/imagemagick<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/imagemagick-6.q16<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libimage-magick-q16-perl<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libmagick++-6.q16-5v5<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libmagickcore-6.q16-2<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libmagickcore-6.q16-2-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libmagickwand-6.q16-2<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/imagemagick<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/libmagick++5<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/libmagickcore5<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/libmagickcore5-extra<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/libmagickwand5<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/perlmagick<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.7.7.10-6ubuntu3.13+esm24
Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.8.9.9-7ubuntu5.16+esm23
Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.9.7.4+dfsg-16ubuntu6.15+esm15
Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13
Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13
Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in 8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12
Upgrade
Upgrade ubuntu/imagemagick to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/imagemagick-6.q16 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/imagemagick-6.q16hdri to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libimage-magick-q16-perl to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libimage-magick-q16hdri-perl to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16-9t64 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16hdri-9t64 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-7-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-7t64 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16hdri-7-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16hdri-7t64 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16-7t64 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16hdri-7t64 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16-8 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16hdri-8 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-6 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-6-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16hdri-6 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16hdri-6-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16-6 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16hdri-6 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16-7 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16hdri-7 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-3 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-3-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16hdri-3 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16hdri-3-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16-3 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16hdri-3 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++-6.q16-5v5 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-2 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore-6.q16-2-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand-6.q16-2 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagick++5 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore5 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickcore5-extra to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/libmagickwand5 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/perlmagick to a version that resolves this vulnerability.
Fixed in Ubuntu Pro

Event History

Aug 10, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·08:04 PM

Data Sourced

via OSV·08:04 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which Ubuntu releases are affected by the wavelet-denoise issue?

CVE-2026-30936 affects Ubuntu 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS. Exploitation involves processing certain images with the wavelet-denoise operation and may result in arbitrary code execution.

Are 32-bit deployments uniquely exposed to any of these issues?

Yes. CVE-2026-31853 affects handling of extremely large SFW images on 32-bit systems and can cause an integer overflow leading to denial of service.

What image inputs or operations should be treated as higher risk?

The advisory identifies certain images processed with wavelet-denoise, extremely large XWD images, extremely large SFW images on 32-bit systems, and use of the sixel encoder when memory allocation fails. The wavelet-denoise, XWD, and sixel issues may result in arbitrary code execution.

Which releases are affected by the sixel encoder issue?

CVE-2026-32259 affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS. It involves memory allocation failures in the sixel encoder that can trigger a stack buffer overflow and potentially allow arbitrary code execution.

USN-8592-1: imagemagick vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which Ubuntu releases are affected by the wavelet-denoise issue?

Are 32-bit deployments uniquely exposed to any of these issues?

What image inputs or operations should be treated as higher risk?

Which releases are affected by the sixel encoder issue?

Company

Resources

Contact

Frequently Asked Questions

Which Ubuntu releases are affected by the wavelet-denoise issue?

Are 32-bit deployments uniquely exposed to any of these issues?

What image inputs or operations should be treated as higher risk?

Which releases are affected by the sixel encoder issue?