PT-2026-56439 · Imagemagick · Imagemagick

Unbengable12 · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-56374

NVD

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-56374

Produtos afetados

Imagemagick

Referências · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w54j-7wpm-crhj · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-56374 · Nota de Segurança
• https://vulncheck.com/advisories/imagemagick-heap-buffer-overflow-in-ftxt-encoder-via-format-parameter · Nota