RaqibCTI
CVE

CVE-2016-3714

P2
ImageMagick Improper Input Validation Vulnerability
ImageMagick · ImageMagick
Date added (CISA)
2024-09-09
Remediation due
2024-09-30
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.

Source: NVD ↗ · CISA KEV Catalog ↗