CVE-2021-3962: ImageMagick

High severity, CVSS 7.8. EPSS: 6% chance of exploitation in the next 30 days.

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected products

• ImageMagick ImageMagick: version 7.1.0-14 only

Published 2021-11-19. Last modified 2026-06-17.