When ImageMagick processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. Upstream issue: https://github.com/ImageMagick/ImageMagick/issues/561