CVE-2016-10065: ImageMagick

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

Affected products

• ImageMagick ImageMagick: up to and including 6.9.7-10
• Opensuse Leap: version 42.1 only

Published 2017-03-03. Last modified 2026-06-17.