Skip to content
English

Products › Brands

Brand

ImageMagick: actively exploited vulnerabilities

3 vulnerabilities in ImageMagick products (ImageMagick) are in CISA’s catalog of exploited vulnerabilities. Last added: September 9, 2024.

By category

Add just one ImageMagick category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • ImageMagick 3 vulnerabilities · Frameworks

Name used by CISA: ImageMagick. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ImageMagick list.

  1. Rank 1ImageMagick

    CVE-2016-3714

    CVE from 2016, added in 2024

    ImageMagick Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 9, 2024
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)
  2. Rank 2ImageMagick

    CVE-2016-3715

    CVE from 2016, added in 2021

    ImageMagick Arbitrary File Deletion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    5.5 (medium)
  3. Rank 3ImageMagick

    CVE-2016-3718

    CVE from 2016, added in 2021

    ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    5.5 (medium)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.