CVE Watch—

CVE-2016-3714

ImageMagick Improper Input Validation Vulnerability

CVSS

—

Sem CVSS

EPSS

97.5%

p100

KEV

SIM

9 de set. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

97.5%EPSS · 30 dias97.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

ImageMagick / ImageMagick

Vulnerabilidade

ImageMagick Improper Input Validation Vulnerability

Adicionado ao KEV

9 de set. de 2024

Corrigir até

30 de set. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588#p132726, https://imagemagick.org/archive/releases/; https://nvd.nist.gov/vuln/detail/CVE-2016-3714

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2016-3718—

99.5%

KEV—80ImageMagick Server-Side Request Forgery (SSRF) Vulnerability—CVE-2016-3715—

99.5%

KEV—80ImageMagick Arbitrary File Deletion Vulnerability—