The vulnerability is an off‑by‑one error in the MSL decoder of ImageMagick. When the library processes a malicious MSL file, a memory boundary is mis‑handled, which can cause the program to crash. The crash results in a denial of service for any process that uses ImageMagick to process images. This weakness is classified as CWE‑193.

The flaw affects the ImageMagick library in all releases prior to 7.1.2‑19. Applications or services that rely on these older versions to load or transform images are susceptible. The fix is available in version 7.1.2‑19 and later, and for the .NET binding Magick.NET the corresponding update is 14.12.0.

The CVSS score of 6.2 indicates a moderate severity. No exploitation probability score is provided, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local or remote delivery of a crafted MSL image to an ImageMagick‑based service; an adversary could trigger the crash and force the target application to terminate or restart, causing a denial of service. Because the issue is triggered by image processing, any path that accepts untrusted images could be abused.