CVE-2025-62171 is an integer overflow vulnerability in the BMP decoder of Magick.NET Q16 AnyCPU (ImageMagick). The vulnerability affects 32-bit systems with manually increased resource limits and allows a crafted BMP file to trigger a denial-of-service via AddressSanitizer crashes. The originally released patch in ImageMagick 7.1.2-2 is incomplete, and versions up to 7.1.2-5 remain vulnerable. The issue arises because the overflow check is performed after the integer overflow occurs, making it ineffective. A fix is available in version 14.9.0.