Skip to content

Products › Brands

Brand

ImageMagick: actively exploited vulnerabilities

3 vulnerabilities in ImageMagick products (ImageMagick) are in CISA’s catalog of exploited vulnerabilities. Last added: September 9, 2024.

By category

Add just one ImageMagick category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • ImageMagick3 vulnerabilities, Frameworks

Name used by CISA: ImageMagick. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ImageMagick list.

  1. Rank 1

    ImageMagickCVE-2016-3714

    ImageMagick Improper Input Validation Vulnerability

    CVE from 2016, added in 2024

    CVSS severity 8.4high

    Added Sep 9, 2024

  2. Rank 2

    ImageMagickCVE-2016-3715

    ImageMagick Arbitrary File Deletion Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 5.5medium

    Added Nov 3, 2021

  3. Rank 3

    ImageMagickCVE-2016-3718

    ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 5.5medium

    Added Nov 3, 2021

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.