coders/rle.c in ImageMagickhas an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. Upstream patch: https://github.com/ImageMagick/ImageMagick/commit/b218117cad34d39b9ffb587b45c71c5a49b12bde