USN-8810-1: ImageMagick vulnerabilities
What it means
ImageMagick ha subito diversi problemi di sicurezza che potrebbero permettere a un attaccante di causare un denial of service o eseguire codice arbitrario. Le vulnerabilità colpiscono diverse versioni di Ubuntu LTS. La patch è disponibile tramite Ubuntu Pro via ESM Apps. Non è confermato un sfruttamento attivo in rete.
Why it matters
Le PMI italiane che utilizzano Ubuntu LTS potrebbero essere esposte a interruzioni del servizio o attacchi più gravi se non applicano le patch. La gestione delle vulnerabilità è cruciale per proteggere dati e operatività aziendali.
Recommended actions
- Applicare le patch disponibili tramite Ubuntu Pro via ESM Apps
- Verificare le versioni di ImageMagick installate e aggiornarle
- Limitare l'accesso a file MSL e monitorare l'apertura di file sospetti
- Configurare regole di firewall per bloccare accessi non autorizzati a servizi ImageMagick
- Eseguire un audit delle dipendenze per verificare l'uso di ImageMagick in applicazioni critiche
- Implementare un sistema di monitoraggio per rilevare eventi di denial of service
Potential operational benefits
- Riduzione della superficie esposta a vulnerabilità
- Protezione contro interruzioni del servizio e attacchi più gravi
- Miglioramento della conformità e della gestione delle vulnerabilità
Translation in progress
The official content is available in the original language. The Italian version will be published once automated checks are complete.
Text acquired from the source
It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-33535) Kamil Frankowicz discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-33536) It was discovered that ImageMagick did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-34238) Jake Lamberson discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40310) Junmin Zhu discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-40311) It was discovered that ImageMagick did not correctly handle opening certain MSL files. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly cause a denial of service. This issue affected Ubuntu 26.04 LTS. (CVE-2026-40312) It was discovered that ImageMagick
- Source
- Ubuntu Security Notices
- Publishing entity
- Ubuntu Security
- Entity type
- vendor security
- Area
- Global
- Original language
- en · translation in preparation
- Publication
- 24/09/2026 02:20
- MITRE ATT&CK
- T1562
- CVE
- CVE-2026-33535, CVE-2026-33536, CVE-2026-34238, CVE-2026-40310, CVE-2026-40311, CVE-2026-40312
Affected products and versions
The collector will check NVD and the available official vendor advisories.