UBUNTU-CVE-2026-93588

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-93588

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93588.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-93588

Upstream

CVE-2026-93588

Downstream

USN-8859-1

Related

USN-8859-1

Published

2026-09-18T14:19:00Z

Modified

2026-10-02T00:30:09Z

Severity

3.1 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
2.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory (resource) limit at a specific point during processing, the failed allocation is not handled and a NULL pointer is dereferenced, which can lead to a denial of service (application crash) when processing a specially crafted or sufficiently large PNM image.

References

Affected packages

Ubuntu:Pro:20.04:LTS / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/ubuntu/imagemagick?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16

Affected versions

8:6.*

8:6.9.10.23+dfsg-2.1ubuntu3

8:6.9.10.23+dfsg-2.1ubuntu8

8:6.9.10.23+dfsg-2.1ubuntu9

8:6.9.10.23+dfsg-2.1ubuntu10

8:6.9.10.23+dfsg-2.1ubuntu11

8:6.9.10.23+dfsg-2.1ubuntu11.1

8:6.9.10.23+dfsg-2.1ubuntu11.2

8:6.9.10.23+dfsg-2.1ubuntu11.4

8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1

8:6.9.10.23+dfsg-2.1ubuntu11.5

8:6.9.10.23+dfsg-2.1ubuntu11.6

8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1

8:6.9.10.23+dfsg-2.1ubuntu11.7

8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1

8:6.9.10.23+dfsg-2.1ubuntu11.9

8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1

8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2

8:6.9.10.23+dfsg-2.1ubuntu11.10

8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1

8:6.9.10.23+dfsg-2.1ubuntu11.11

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "imagemagick",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "imagemagick-6-common",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "imagemagick-6.q16",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "imagemagick-6.q16hdri",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "imagemagick-common",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagick++-6-headers",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagick++-6.q16-8",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagick++-6.q16hdri-8",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickcore-6-arch-config",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickcore-6-headers",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16-6-extra",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16hdri-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16hdri-6-extra",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickwand-6-headers",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickwand-6.q16-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "libmagickwand-6.q16hdri-6",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        },
        {
            "binary_name": "perlmagick",
            "binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93588.json"

Ubuntu:Pro:22.04:LTS / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/ubuntu/imagemagick?arch=source&distro=esm-apps%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16

Affected versions

8:6.*

8:6.9.11.60+dfsg-1ubuntu1

8:6.9.11.60+dfsg-1.3

8:6.9.11.60+dfsg-1.3build1

8:6.9.11.60+dfsg-1.3build2

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "imagemagick",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "imagemagick-6-common",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "imagemagick-6.q16",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "imagemagick-6.q16hdri",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "imagemagick-common",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagick++-6-headers",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagick++-6.q16-8",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagick++-6.q16hdri-8",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickcore-6-arch-config",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickcore-6-headers",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16-6-extra",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16hdri-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickcore-6.q16hdri-6-extra",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickwand-6-headers",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickwand-6.q16-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "libmagickwand-6.q16hdri-6",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        },
        {
            "binary_name": "perlmagick",
            "binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93588.json"

Ubuntu:Pro:24.04:LTS / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/ubuntu/imagemagick?arch=source&distro=esm-apps%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15

Affected versions

8:6.*

8:6.9.11.60+dfsg-1.6ubuntu1

8:6.9.12.98+dfsg1-5

8:6.9.12.98+dfsg1-5.2build1

8:6.9.12.98+dfsg1-5.2build2

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "imagemagick",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "imagemagick-6-common",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "imagemagick-6.q16",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "imagemagick-6.q16hdri",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagick++-6-headers",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagick++-6.q16-9t64",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagick++-6.q16hdri-9t64",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickcore-6-arch-config",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickcore-6-headers",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickcore-6.q16-7-extra",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickcore-6.q16-7t64",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickcore-6.q16hdri-7-extra",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickcore-6.q16hdri-7t64",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickwand-6-headers",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickwand-6.q16-7t64",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "libmagickwand-6.q16hdri-7t64",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        },
        {
            "binary_name": "perlmagick",
            "binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93588.json"

Ubuntu:Pro:26.04:LTS / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/ubuntu/imagemagick?arch=source&distro=esm-apps%2Fresolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8:7.1.2.18+dfsg1-1ubuntu0.1~esm4

Affected versions

8:7.*

8:7.1.2.3+dfsg1-1

8:7.1.2.8+dfsg1-1

8:7.1.2.12+dfsg1-1

8:7.1.2.13+dfsg1-1

8:7.1.2.15+dfsg1-1

8:7.1.2.16+dfsg1-1

8:7.1.2.18+dfsg1-1

8:7.1.2.18+dfsg1-1ubuntu0.1~esm1

8:7.1.2.18+dfsg1-1ubuntu0.1~esm2

8:7.1.2.18+dfsg1-1ubuntu0.1~esm3

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "imagemagick",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "imagemagick-7-common",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "imagemagick-7.q16",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "imagemagick-7.q16hdri",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libimage-magick-perl",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libimage-magick-q16-perl",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libimage-magick-q16hdri-perl",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagick++-7-headers",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagick++-7.q16-5",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagick++-7.q16hdri-5",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickcore-7-arch-config",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickcore-7-headers",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickcore-7.q16-10",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickcore-7.q16-10-extra",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-10",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickcore-7.q16hdri-10-extra",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickwand-7-headers",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickwand-7.q16-10",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "libmagickwand-7.q16hdri-10",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        },
        {
            "binary_name": "perlmagick",
            "binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93588.json"