Exploited Vulnerabilities DailyCVE-2016-3714: ImageMagick ImageMagick
EPSS97.4%No. 287 of 1739 in KEV
CVE year2016~8 yrs before listing
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | ImageMagick |
| Product | ImageMagick |
| Name | ImageMagick Improper Input Validation Vulnerability |
| Added to KEV | 2024-09-09 |
| US federal due date | 2024-09-30 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2016-3718 | ImageMagick ImageMagick | 2021-11-03 | 76.7% | Unknown |
| CVE-2016-3715 | ImageMagick ImageMagick | 2021-11-03 | 75.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A ImageMagick ImageMagick vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-09-09.