GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file related to the (1) DrawImage function in magick/render.c (2) SVGStartElement function in coders/svg.c and (3) TraceArcPath function in magick/render.c.