Known Exploited Vulnerabilities September 09, 2024 · CISA KEV Catalog

CVE-2016-3714: Image Magick Improper Input Validation Vulnerability

ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2016-3714ImageMagick

Related

CVE-2016-3718: Image Magick Server-Side Request Forgery (SSRF) Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

CVE-2016-3715: Image Magick Arbitrary File Deletion Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026