GHSA-w54j-7wpm-crhj: ImageMagick has a heap-buffer-overflow in FTXT encoder

April 14, 2026 (updated April 16, 2026)

The FTXT encoder lacks a boundary check when parsing ftxt:format, resulting in an out of bounds read.

==3040863==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5020000085b2 at pc 0x606c1ee0c6ce bp 0x7ffee30d6150 sp 0x7ffee30d6148
READ of size 1 at 0x5020000085b2 thread T0

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w54j-7wpm-crhj
github.com/advisories/GHSA-w54j-7wpm-crhj

Code Behaviors & Features

Detect and mitigate GHSA-w54j-7wpm-crhj with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →