ImageMagick contains an out‑of‑bounds write of a zero byte in the X11 display interaction path. The flaw can cause the application to crash when processing a crafted image. The result is a denial of service, as the affected process terminates unexpectedly, without offering elevation of privilege, data corruption, or data disclosure.

Any installation of ImageMagick using a version earlier than 7.1.2‑18 or 6.9.13‑43 is potentially vulnerable. The vulnerability affects the ImageMagick product across all platforms that expose the X11 display interface.

The CVSS score of 4 indicates a moderate severity, and the EPSS score is not available, suggesting there is no publicly known exploit yet. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the ability to submit a malicious image to the X11 display path, which may be local or remote depending on the context; however, the input does not explicitly state the exact vector, so this is inferred from the description of the affected interaction.