When Magick parses an XML file it is possible that a single zero byte is written out of the bounds.
{
"cwe_ids": [
"CWE-122",
"CWE-191"
],
"github_reviewed": true,
"nvd_published_at": "2026-04-13T21:16:25Z",
"github_reviewed_at": "2026-04-13T19:33:00Z",
"severity": "MODERATE"
}