This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-93589 →

UBUNTU-CVE-2026-93589

ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image b...

Original description

The description as published by the source.

ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Ubuntu:Pro:18.04:LTS imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+esm18"}]}]

Ubuntu:Pro:20.04:LTS imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"}]}]

Ubuntu:Pro:22.04:LTS imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"}]}]

Ubuntu:Pro:24.04:LTS imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"}]}]

Ubuntu:Pro:26.04:LTS imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"}]}]

References

advisory ubuntu.com
report ubuntu.com
report cve.org
report github.com
report vulncheck.com