CVE-2026-56374

Description

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.

CVSS Vector

References

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w54j-7wpm-crhj
• https://www.vulncheck.com/advisories/imagemagick-heap-buffer-overflow-in-ftxt-encoder-via-format-parameter