CVE-2021-3962

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=2023196Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/82775af03bbb10a0a1d0e15c0156c75673b4525ePatch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/4446Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2023196Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/82775af03bbb10a0a1d0e15c0156c75673b4525ePatch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/4446Third Party Advisory

Published

Nov 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39614D-Link DVX-2000MS contains hard-coded credentials for undocu…9.8
• CVE-2021-39615D-Link DSR-500N version 1.02 contains hard-coded credentials…9.8
• CVE-2021-39616Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2…9.8
• CVE-2021-39617Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-39618In multiple methods of EuiccNotificationManager.java, there …7.8
• CVE-2021-39619In updatePackageMappingsData of UsageStatsService.java, ther…7.8
• CVE-2021-39620In ipcSetDataReference of Parcel.cpp, there is a possible wa…7.8
• CVE-2021-39621In sendLegacyVoicemailNotification of LegacyModeSmsHandler.j…7.8
• CVE-2021-39622In GBoard, there is a possible way to bypass Factory Reset P…7.8
• CVE-2021-39623In doRead of SimpleDecodingSource.cpp, there is a possible o…9.8
• CVE-2021-39624In PackageManager, there is a possible permanent denial of s…5.5
• CVE-2021-39625In showCarrierAppInstallationNotification of EuiccNotificati…7.3