CVE-2016-5690: The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote...

Security readout for executives and security teams

CVE-2016-5690 is an ImageMagick DCM image parsing flaw. A malicious or malformed DICOM image could trigger invalid memory reads in older ImageMagick versions. The public record says remote attackers may have unspecified impact, but it does not provide a CVSS score or confirmed exploitation evidence. Exposure is most likely where older ImageMagick versions process untrusted DICOM/DCM files, such as image upload, conversion, thumbnailing, or document-processing workflows. Downstream products may also be affected if they bundle vulnerable ImageMagick code. Treat this as a targeted patching item for systems that process untrusted images, especially healthcare or document workflows using DICOM files. Business urgency is unclear without local exposure because the public severity and impact are incomplete. Mitigation focus: Upgrade ImageMagick 6 to 6.9.4-5 or later, or 7.x to 7.0.1-7 or later.; Review vendor advisories for products that embed or redistribute ImageMagick.; Avoid processing untrusted DCM files until vulnerable deployments are upgraded..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.