CVE-2016-10048: ImageMagick

High severity, CVSS 7.5. EPSS: 6.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.

Affected products

• ImageMagick ImageMagick: version 6.9.4-7 only
• Opensuse Project Leap: version 42.1 only

Published 2017-03-23. Last modified 2026-06-17.