CVE-2016-3715VulnerabilityPublished 11/03/2021Updated 10/24/2026
CVE-2016-3715: ImageMagick Arbitrary File Deletion Vulnerability
Affects ImageMagick ImageMagickSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 11/03/2021
- KEV deadline
- 05/03/2022
- EPSS
- 75.3% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2016-3715 is a high-severity vulnerability in ImageMagick that allows arbitrary file deletion through the use of the 'ephemeral' pseudo protocol. This protocol deletes files after reading, and the vulnerability enables attackers to exploit this behavior to delete files on the system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.