CVE-2016-3714 ImageMagick ImageMagick
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.
- CVSS
- not scored
On CISA’s exploited list
ImageMagick Improper Input Validation Vulnerability
- Added
- 2024-09-09
- Federal patch deadline
- 2024-09-30
- Ransomware use
- not known