ZeroDay Findings
Sign inSign up

Findings

CVE-2016-3715

ImageMagick Arbitrary File Deletion Vulnerability

Published May 5, 2016 · updated Jun 16, 2026 · redhat enterprise linux desktop

ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

Timeline

Detection, updates, and resolution for this record.

  1. May 5, 2016 · Catalog

    Detected

    ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe imagemagick/imagemagickversion unspecified
  • cpe oracle/linux6
  • cpe redhat/enterprise linux desktop6.0
  • cpe redhat/enterprise linux desktop7.0
  • cpe redhat/enterprise linux eus6.7
  • cpe redhat/enterprise linux eus7.2
  • cpe redhat/enterprise linux eus7.3
  • cpe redhat/enterprise linux eus7.4
  • cpe redhat/enterprise linux eus7.5
  • cpe redhat/enterprise linux eus7.6
  • cpe suse/linux enterprise debuginfo11
  • vendor ImageMagick ImageMagickversion unspecified

Sources

  • CISA KEVCVE-2016-3715

    ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

    cisa.gov
  • CVE.orgCVE-2016-3715

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2016-3715

    30-day exploitation probability 75.3%

    first.org
  • Exploit Database39767

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2016-3715

    The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

    nvd.nist.gov

References