A zero byte is written beyond the bounds of a memory buffer in the X11 display interaction of ImageMagick, resulting in a program crash. The flaw is identified as an out-of-bounds write (CWE-787) and does not directly provide remote code execution or data disclosure. When triggered, the target application may terminate unexpectedly and a denial‑of‑service condition can be induced on the affected system.

ImageMagick versions older than 7.1.2-18 and 6.9.13-43 are affected. The software is distributed as open‑source image editing and manipulation tools; updates newer than the listed versions provide the fix.

The CVSS score of 4 indicates moderate severity, and the EPSS score of less than 1% suggests low likelihood of widespread exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires a process that interacts with the X11 display interface, so the attack vector is likely local or requires an attacker to deliver a malicious image via a service that hands it to ImageMagick while an X11 session is available. The outcome is limited to causing the application to crash or become unavailable rather than enabling further system compromise.