CVE-2016-4564

CVE-2016-4564 describes a buffer overflow vulnerability in the DrawImage function of ImageMagick versions prior to 6.9.4-0 and 7.0.1-2. This flaw, stemming from an incorrect function call when locating tokens, allows remote attackers to trigger a denial of service (application crash) or potentially achieve further unspecified impact through a crafted file. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for impact on confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.