ImageMagick versions prior to 7.1.2-31 are vulnerable to an integer-size calculation error that triggers a heap buffer overwrite when a client sends crafted pixel data to the distributed pixel cache server. This flaw can be exploited to crash the server, resulting in a denial‑of‑service impact. The weakness involves integer overflow/underflow, improper buffer bounds, and a heap buffer overwrite (CWE-787).

The vulnerability affects the ImageMagick ImageMagick product on all released versions before 7.1.2-31. Users of older builds should check their installed version; applying the 7.1.2-31 release or later resolves the issue.

The CVSS score of 5.3 indicates moderate severity, and the vulnerability is not listed in the CISA KEV catalog. EPSS is not available, but the exploitability is straightforward for any client that can reach the distributed pixel cache server: sending malicious image data with a crafted pixel array triggers the overflow and crashes the service. As a result, the risk is primarily a remote denial‑of‑service if the server is exposed to untrusted clients.