UpHeron
All vulnerabilities

Servers and applications

CVE-2016-3715

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 3 Nov 2021.

Severity
Medium 5.5
Published
5 May 2016
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.9.3-10
Exploit chance
75% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Files or directories accessible to outside parties (CWE-552)
Attack
Needs local access · No login needed · Needs someone to click or open something
Attacker can
Change data
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Sources
NVD

Affected software

SoftwareAffected versions
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick
  • Every version before 6.9.3-10
  • Version 7.0.0-0
  • Version 7.0.1-0

Known exploited

CISA name
ImageMagick Arbitrary File Deletion Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
3 May 2022
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-3715
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-3715