The vulnerability is a type‑confusion flaw in the INFO, JSON and YAML encoders of ImageMagick. An internal routine receives a pointer of an unexpected type when an image is written in a compressed format, causing the process to abort with SIGABRT or SIGSEGV. The resulting crash can halt the application that uses ImageMagick, delivering a denial‑of‑service condition for the affected service or end‑user.

The flaw affects all releases of ImageMagick prior to version 6.9.13‑57 and any 7.x release before 7.1.2‑32. The vendor is ImageMagick, and the product is the ImageMagick image‑processing library. Systems that incorporate these unpatched versions are vulnerable.

The CVSS score of 2.0 indicates a low severity rating. EPSS data are not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation. An attacker must be able to force the library to write an image to trigger the crash. The likely attack vector is through a component that accepts user‑supplied images; if ImageMagick is used in a web interface, remote input could construct the conditions for the crash. Because the flaw results in a crash rather than code execution, the risk is primarily localized denial of service rather than privilege escalation or data breach.