CVE-2016-6823: Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2016-6823 is a crash risk in ImageMagick's BMP image handling. A specially crafted BMP with malicious height and width values can trigger an integer overflow and out-of-bounds write, causing denial of service in systems that process untrusted images. Exposure is most likely in web apps, media services, document workflows, or automation that pass user-supplied BMP files to ImageMagick versions before 7.0.2-10, including older vendor-packaged builds without a backported fix. Treat this as a targeted availability risk, not a confirmed widespread compromise issue. Prioritize remediation where ImageMagick processes untrusted uploads or business-critical media, especially internet-facing services. Mitigation focus: Upgrade ImageMagick to 7.0.2-10 or a vendor package containing the fix.; Check Linux distribution advisories for backported ImageMagick security fixes.; Restrict or disable untrusted BMP processing where business workflows allow..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.