November 3, 2021 · Applied Cybernetics Group
CVE-2016-3715 — ImageMagick ImageMagick
ImageMagick Arbitrary File Deletion Vulnerability
- Added to KEV
2021-11-03- Federal due date
2022-05-03- Vendor
- ImageMagick
- Product
- ImageMagick
- EPSS
- 99.6th percentile (score 0.893, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2016-3715
CISA short description
ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.
Required action
Apply updates per vendor instructions.