coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"introduced": "42.1"
},
{
"last_affected": "42.1"
}
],
"source": "CPE_STRING",
"vendor_product": "opensuse_project:leap",
"cpes": [
"cpe:2.3:o:opensuse_project:leap:42.1:*:*:*:*:*:*:*"
]
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10069.json"
[
{
"target": {
"file": "coders/mat.c"
},
"deprecated": false,
"source": "https://github.com/imagemagick/imagemagick/commit/8a370f9ab120faf182aa160900ba692ba8e2bcf0",
"id": "CVE-2016-10069-2e41cb2b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"21731009284900956565357781049879479659",
"9153364276018900294897231335757807911",
"99844486914524506257281946785564196541",
"168633301268211267042086619581177750083"
]
},
"signature_type": "Line"
},
{
"target": {
"function": "ReadMATImage",
"file": "coders/mat.c"
},
"deprecated": false,
"source": "https://github.com/imagemagick/imagemagick/commit/8a370f9ab120faf182aa160900ba692ba8e2bcf0",
"id": "CVE-2016-10069-e796a64a",
"signature_version": "v1",
"digest": {
"length": 11223.0,
"function_hash": "132691330867877762177963165557659038350"
},
"signature_type": "Function"
}
]
"2026-07-08T12:35:49Z"
{
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "6.9.4-4"
}
],
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*"
}