Skip to content
Fencer Vulns
medium 5.5

CVE-2016-3715 kev in the critical feed json

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted i…

published 2016-05-05 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-4736

cvss
5.5
version 3.1, CNA
cisa kev
Exploited
added 2021-11-03
epss
75.3%
EPSS 75.3% chance of exploitation in 30 days, percentile 99.5%
public exploits
1
Exploit-DB

Summary

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Patch / fix

cisa required action Apply updates per vendor instructions.

  • imagemagick imagemagick 6.9.3-10
  • imagemagick Debian 14, Debian 13, Debian 12 8:6.9.6.2+dfsg-2
  • graphicsmagick Debian 14, Debian 13, Debian 12 1.3.24-1

debian advisories DEBIAN-CVE-2016-3715

  • imagemagick Ubuntu 14.04 LTS 8:6.7.7.10-6ubuntu3.1
  • imagemagick Ubuntu 16.04 LTS 8:6.8.9.9-7ubuntu5.1
  • graphicsmagick Ubuntu 14.04 LTS 1.3.18-1ubuntu3.1
  • graphicsmagick Ubuntu 16.04 LTS 1.3.23-1ubuntu0.1

ubuntu advisories UBUNTU-CVE-2016-3715

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • ImageMagick RHEL 6 6.7.2.7-4.el6_7
  • ImageMagick RHEL 7 6.7.8.9-13.el7_2
  • ImageMagick-c++ RHEL 6 6.7.2.7-4.el6_7
  • ImageMagick-c++ RHEL 7 6.7.8.9-13.el7_2
  • ImageMagick-perl RHEL 6 6.7.2.7-4.el6_7
  • ImageMagick-perl RHEL 7 6.7.8.9-13.el7_2

red hat advisories RHSA-2016:0726

  • ImageMagick SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +6 more 6.4.3.6-7.34.1
  • GraphicsMagick Studio Onsite 1.3, SLE Software Development Kit 11 SP4 1.2.5-4.35.1
  • ImageMagick SLES for SAP 12 SP1, SLES for SAP 12, SLES 12 SP1 +7 more 6.8.8.1-19.1

suse advisories SUSE-SU-2016:1275-1SUSE-SU-2016:1276-1SUSE-SU-2016:1260-1

  • ImageMagick openSUSE Tumbleweed 6.9.6.6-1.1
  • GraphicsMagick openSUSE Tumbleweed 1.3.25-1.1

opensuse advisories openSUSE-SU-2024:10040-1openSUSE-SU-2024:10505-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-3715 updated cvss 4.3

ImageMagick: File deletion

  • Red Hat OpenShift Enterprise 2 ImageMagick
    affected: workaround, no fix available
  • Red Hat Enterprise Linux Client (v. 7) ImageMagick 6.7.8.9-13.el7_2, ImageMagick-c++ 6.7.8.9-13.el7_2 Red Hat Enterprise Linux Client Optional (v. 7) ImageMagick-perl 6.7.8.9-13.el7_2 Red Hat Enterprise Linux ComputeNode Optional (v. 7) ImageMagick 6.7.8.9-13.el7_2, ImageMagick-c++ 6.7.8.9-13.el7_2, ImageMagick-perl 6.7.8.9-13.el7_2 Red Hat Enterprise Linux Desktop (v. 6) ImageMagick 6.7.2.7-4.el6_7, ImageMagick-c++ 6.7.2.7-4.el6_7 Red Hat Enterprise Linux Desktop Optional (v. 6) ImageMagick-c++ 6.7.2.7-4.el6_7, ImageMagick-perl 6.7.2.7-4.el6_7 Red Hat Enterprise Linux HPC Node Optional (v. 6) ImageMagick 6.7.2.7-4.el6_7, ImageMagick-c++ 6.7.2.7-4.el6_7, ImageMagick-perl 6.7.2.7-4.el6_7
    +8 more products
    Red Hat Enterprise Linux Server (v. 6) ImageMagick 6.7.2.7-4.el6_7, ImageMagick-c++ 6.7.2.7-4.el6_7 Red Hat Enterprise Linux Server (v. 7) ImageMagick 6.7.8.9-13.el7_2, ImageMagick-c++ 6.7.8.9-13.el7_2, ImageMagick-perl 6.7.8.9-13.el7_2 Red Hat Enterprise Linux Server Optional (v. 6) ImageMagick-c++ 6.7.2.7-4.el6_7, ImageMagick-perl 6.7.2.7-4.el6_7 Red Hat Enterprise Linux Server Optional (v. 7) ImageMagick-c++ 6.7.8.9-13.el7_2 Red Hat Enterprise Linux Workstation (v. 6) ImageMagick 6.7.2.7-4.el6_7, ImageMagick-c++ 6.7.2.7-4.el6_7 Red Hat Enterprise Linux Workstation (v. 7) ImageMagick 6.7.8.9-13.el7_2, ImageMagick-c++ 6.7.8.9-13.el7_2, ImageMagick-perl 6.7.8.9-13.el7_2 Red Hat Enterprise Linux Workstation Optional (v. 6) ImageMagick-c++ 6.7.2.7-4.el6_7, ImageMagick-perl 6.7.2.7-4.el6_7 Red Hat Enterprise Linux Workstation Optional (v. 7) ImageMagick-doc 6.7.8.9-13.el7_2, ImageMagick-devel 6.7.8.9-13.el7_2, ImageMagick-c++-devel 6.7.8.9-13.el7_2, ImageMagick-debuginfo 6.7.8.9-13.el7_2
    fixed: vendor fix RHSA-2016:0726
  • Red Hat Enterprise Linux 5 ImageMagick
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-39767)
  2. Published
  3. Added to CISA KEV
  4. CISA patch deadline
  5. CISA SSVC: exploitation active

Known exploited

Added
5 y ago
Patch by
2022-05-03 (4 y ago)
Ransomware
Not known
Required action
Apply updates per vendor instructions.
Vendor, product
ImageMagick, ImageMagick
CISA name
ImageMagick Arbitrary File Deletion Vulnerability

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
no
Technical impact
partial
Assessed
21 mo ago

Exploit prediction

75.31% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-39767 ImageMagick 7.0.1-0 / 6.9.3-9 - 'ImageTragick ' Multiple Vulnerabilities dos, 2016-05-04
  • imagemagick.org https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CNA 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NVD 2.0 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P

Classification

Weakness
  • CWE-552 Files or Directories Accessible to External Parties

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.