ImageMagick’s JBIG decoder fails to verify that a pointer is initialized, causing the software to read from memory that has not yet been set. The flaw falls under CWE-252 and CWE-824 categories. When an attacker supplies a crafted image, the resulting memory corruption can cause the process to crash, providing a denial‑of‑service vector.

The vulnerability impacts all releases of ImageMagick earlier than 7.1.2-16 and 6.9.13-41. Upgrading to 7.1.2-16 or later, or to 6.9.13-41 or later, removes the issue.

The CVSS score of 7.5 indicates a high severity. Exploitation probability is reported to be below 1 percent and the flaw is not listed in the CISA KEV catalogue. The most likely attack vector is the processing of malicious image files, such as via command‑line utilities or applications that expose ImageMagick to external users. Successful exploitation would cause a denial of service.