CVE-2016-10070

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.

• CWE-125

• http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/12/26/9Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95221Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1545366Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1410510Issue Tracking, Patch
• https://github.com/ImageMagick/ImageMagick/commit/a6240a163cb787909703d9fc649cf861f60ddd7cPatch, Vendor Advisory
• https://github.com/ImageMagick/ImageMagick/commit/b173a352397877775c51c9a0e9d59eb6ce24c455Issue Tracking, Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/12/26/9Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95221Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1545366Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1410510Issue Tracking, Patch
• https://github.com/ImageMagick/ImageMagick/commit/a6240a163cb787909703d9fc649cf861f60ddd7cPatch, Vendor Advisory
• https://github.com/ImageMagick/ImageMagick/commit/b173a352397877775c51c9a0e9d59eb6ce24c455Issue Tracking, Patch, Third Party Advisory

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10065The ReadVIFFImage function in coders/viff.c in ImageMagick b…
• CVE-2016-10066Buffer overflow in the ReadVIFFImage function in coders/viff…5.5
• CVE-2016-10067magick/memory.c in ImageMagick before 6.9.4-5 allows remote …
• CVE-2016-10068The MSL interpreter in ImageMagick before 6.9.6-4 allows rem…
• CVE-2016-10069coders/mat.c in ImageMagick before 6.9.4-5 allows remote att…
• CVE-2016-1007Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat…
• CVE-2016-10071coders/mat.c in ImageMagick before 6.9.4-0 allows remote att…5.5
• CVE-2016-10072WampServer 3.0.6 has two files called 'wampmanager.exe' and …5.3
• CVE-2016-10073The from method in library/core/class.email.php in Vanilla F…
• CVE-2016-10074The mail transport (aka Swift_Transport_MailTransport) in Sw…
• CVE-2016-10075The tqdm._version module in tqdm versions 4.4.1 and 4.10 all…
• CVE-2016-10079SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a…