In GraphicsMagick 1.4 snapshot-20190322 Q8 there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c which allows attackers to cause a denial of service or information disclosure via a crafted image file.