CVE-2016-3715

MEDIUM5.5

CISA KEV

Published 2016-05-05 · Updated 2026-06-17 · Source secalert@redhat.com

Summary

CVE-2016-3715 is a medium-severity (CVSS 5.5) vulnerability in ImageMagick ImageMagick. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA does not currently list it as used in ransomware campaigns. ImageMagick has 3 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.

All 3 known-exploited ImageMagick vulnerabilities →

Description

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-552

CISA Known-Exploited Vulnerability

Product: ImageMagick — ImageMagick

Name: ImageMagick Arbitrary File Deletion Vulnerability

Date added: 2021-11-03 · Due: 2022-05-03

Required action: Apply updates per vendor instructions.

References

View on NVD

More exploited ImageMagick vulnerabilities

Most recently added to CISA KEV

CVE-2016-3714
ImageMagick — ImageMagick Improper Input Validation Vulnerability
added 2024-09-09
CVE-2016-3718
ImageMagick — ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
added 2021-11-03

View all →

Related CVEs

Same severity, most recent

CVE-2026-92429
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.
2026-10-15 · score 5.3
CVE-2026-92428
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.
2026-10-15 · score 5.3
CVE-2026-76668
A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.
2026-10-15 · score 6.3
CVE-2026-11905
The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.3 via the 'keys_conversion_map' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full post_content and plaintext post_password of private, draft, pending, and future posts belonging to any author, including Administrators and Editors.
2026-10-15 · score 4.3
CVE-2026-110934
Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa.
2026-10-15 · score 4.4