ImageMagick versions prior to 7.1.2-31 and 6.9.13-56 contain a vulnerability in the CUT encoder due to a missing security-policy check. This flaw allows crafted local encoding operations to read data that should be denied by policy and can cause a crash. The issue is fixed in versions 7.1.2-31 and 6.9.13-56.