PT-2026-56439 · Imagemagick · Imagemagick

Unbengable12 · Published 2026-07-08 · Updated 2026-07-08 · CVE-2026-56374

NVD

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-56374

Affected Products

Imagemagick

References · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w54j-7wpm-crhj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56374 · Security Note
• https://vulncheck.com/advisories/imagemagick-heap-buffer-overflow-in-ftxt-encoder-via-format-parameter · Note