CVE-2016-5239: ImageMagick

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected products

• ImageMagick ImageMagick: up to and including 6.9.3-9

Published 2017-03-15. Last modified 2026-06-17.