A stack-based buffer overflow vulnerability in ImageMagick versions prior to 7.1.2-15 poses a significant risk of service disruption and potential system integrity compromise.

The flaw is a stack-based buffer overflow (CWE-121) located in the FTXT image reader component. An unauthenticated attacker can trigger this condition by providing a specially crafted FTXT file to the application, which leads to out-of-bounds memory writes.

The vulnerability carries a CVSS score of 7.4, indicating high severity due to its potential to impact system availability and integrity. Successful exploitation could lead to application crashes, causing denial of service, or potentially allowing an attacker to overwrite critical stack memory, which may facilitate further malicious execution. Organizations relying on ImageMagick for automated image processing pipelines face significant operational risks if these services are targeted.

Immediate Action: Upgrade the core ImageMagick installation to version 7.1.2-15 or later. If utilizing the Magick.NET NuGet packages, update all dependencies to version 14.10.3 to incorporate the necessary security patches.

Proactive Monitoring: Review system and application logs for abnormal crashes or memory-related errors during image processing tasks. Implement monitoring for unexpected file handling activities that may indicate an attempt to process malicious FTXT payloads.

Compensating Controls: Utilize file validation and sanitization routines to ensure only expected image formats are processed. Restrict the ability of external users to upload or submit arbitrary files to processing endpoints wherever possible.

Public Exploit Available: No — exploit_available (false)

Given the potential for high-impact memory corruption, administrators should prioritize updating ImageMagick across all environments. Applying the vendor-provided patch is the only definitive way to eliminate the vulnerability. Ensure that automated build pipelines are updated to reference the patched versions to prevent the reintroduction of this flaw in future deployments.