ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain a vulnerability in the GIF decoder's application extension handler that can disclose uninitialized heap memory. This occurs when processing crafted malicious GIF files, causing the number parser to read and store uninitialized heap memory as image metadata. The vulnerability has a medium severity rating with a CVSS score of 5.3.