Skip to content
CVE Tracker
Back

CVE-2016-3715

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted…

Medium5.5Known exploitedEPSS 75.3%
Published
Updated
Reserved
Assigned by
redhat

Description

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

Exploited in the wild

CISA lists this vulnerability in its Known Exploited Vulnerabilities catalog as ImageMagick Arbitrary File Deletion Vulnerability.

Added
3 Nov 2021
Fix due (US federal)
3 May 2022
Used by ransomware
Not known

Apply updates per vendor instructions.

Scores

CVSS scores of CVE-2016-3715, by who scored it
Scored byCVSSScoreVector
CISA-ADPADP (enrichment)3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NVDNVD · Analyzed3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
75.3% · top 0.5% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: active · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • n/a

    • affected n/a

References (21)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .