CVE-2016-10070: Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows...

Security readout for executives and security teams

CVE-2016-10070 is a crash bug in ImageMagick’s MAT image parser. A hostile MAT file can make vulnerable ImageMagick versions before 6.9.4-0 read outside allocated heap memory and crash, creating denial-of-service risk for systems that process untrusted images. Exposure is most likely in web upload, document conversion, thumbnailing, or automation pipelines using ImageMagick before 6.9.4-0 on untrusted MAT files. Systems that do not use ImageMagick, do not process MAT files, or only handle trusted content have lower practical exposure. Treat this as a targeted availability risk, not a confirmed breach indicator. Patch exposed image-processing services during normal security maintenance, faster if they accept public uploads or support MAT conversion. Mitigation focus: Upgrade ImageMagick to 6.9.4-0 or a vendor-patched package.; Apply relevant distribution advisories, including openSUSE or other vendor updates.; Review vendor guidance for any additional ImageMagick policy controls..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.