ImageMagick versions prior to 7.1.2-19 contain a heap overflow that is triggered when the YAML or JSON encoder processes a specially crafted image, causing an out‑of‑bounds heap write and leading to a crash of the running process. This manifests as a denial of service for any service or application relying on those encoders.

The vulnerability affects the ImageMagick software distributed by ImageMagick:ImageMagick. All releases older than 7.1.2-19 are vulnerable; the issue was fixed in version 7.1.2-19 and later. Administrators should verify the exact version installed on their systems.

The base score of 6.2 indicates moderate severity. No additional exploitation probability data is available, and it is not listed in the known exploited vulnerabilities catalog. The likely attack vector is the feeding of a malicious image to an application that invokes the YAML or JSON output feature, which is inferred from the description. Successful exploitation requires the attacker to have control over an image that will be processed by the encoder; it does not provide privilege escalation or data exfiltration beyond service disruption.