CVE Watch—

CVE-2016-3714

ImageMagick Improper Input Validation Vulnerability

CVSS

—

Sin CVSS

EPSS

97.5%

p100

KEV

SÍ

9 sept 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

97.5%EPSS · 30 días97.5%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

ImageMagick / ImageMagick

Vulnerabilidad

ImageMagick Improper Input Validation Vulnerability

Añadido a KEV

9 sept 2024

Remediar antes de

30 sept 2024

Uso conocido en ransomware

Descripción resumida

ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588#p132726, https://imagemagick.org/archive/releases/; https://nvd.nist.gov/vuln/detail/CVE-2016-3714

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2016-3718—

99.5%

KEV—80ImageMagick Server-Side Request Forgery (SSRF) Vulnerability—CVE-2016-3715—

99.5%

KEV—80ImageMagick Arbitrary File Deletion Vulnerability—