CVE-2026-25967

A flaw was found in ImageMagick. A remote attacker could exploit a stack-based buffer overflow vulnerability in the FTXT image reader. By providing a specially crafted FTXT file, an attacker could cause out-of-bounds writes on the stack, leading to a crash and resulting in a Denial of Service (DoS).

This MODERATE impact flaw in ImageMagick allows a remote attacker to cause a denial of service by providing a specially crafted FTXT file. The vulnerability, a stack-based buffer overflow in the FTXT image reader, can lead to out-of-bounds writes and application crashes. This affects ImageMagick as shipped in Red Hat Enterprise Linux 6 ELS and 7 ELS.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid processing untrusted FTXT image files with ImageMagick. If ImageMagick must process untrusted input, consider running the application in a sandboxed environment to limit potential impact.