ImageMagick versions prior to 7.1.2-31 and 6.9.13-56 contain a vulnerability where a crafted image can bypass security policies that use 'coder' as their domain, potentially allowing unauthorized reading of data restricted by the policy. This issue has been fixed in versions 7.1.2-31 and 6.9.13-56.