---
title: "TYPO3-PSA-2016-001: Critical vulnerabilities in ImageMagick"
url: "https://news.typo3.com/security/advisory/typo3-psa-2016-001"
description: Multiple vulnerabilities in ImageMagick have been discovered, Remote Code Execution being one of them.
image: "https://news.typo3.com/_assets/d1e01514e4c4a5b3147940fa2ec50682/Images/og-image-news.jpg"
date: 2026-06-11
modified: 2026-06-11
categories:
  - The Project
  - Public Service Announcement
---

# TYPO3-PSA-2016-001: Critical vulnerabilities in ImageMagick

- [The Project](https://news.typo3.com/article/category/the-project)
- Security / [Public Service Announcement](https://news.typo3.com/article/category/security/public-service-announcement)

TYPO3-PSA-2016-001: Critical vulnerabilities in ImageMagick
===========================================================

05 May 2016

![A laptop screen displaying a list of security advisories](https://news.typo3.com/typo3temp/assets/_processed_/d/c/csm_security_blog_default_77f8e86036.webp)

Multiple vulnerabilities in ImageMagick have been discovered, Remote Code Execution being one of them.

- ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/7569d41262328e5ed8d27b53e03970ec.png)[Helmut Hummel](https://news.typo3.com/article/author/helmut-hummel)

For image manipulation TYPO3 CMS makes use of either one of the third party tools GraphicsMagick or ImageMagick.

Recently it has been discovered, that **ImageMagick exposes multiple vulnerabilities**, Remote Code Execution (RCE) being one of them. It is known, that these vulnerabilities have already been **exploited in the wild**.

An attacker needs the possibility to upload malicious image files (which are then processed) to exploit the vulnerabilities.

Further details are found on the [vulnerability disclosure website](https://imagetragick.com/).

TYPO3 CMS users who have configured ImageMagick for image manipulation, are strongly encouraged to apply **one** of the following mitigation strategies:

- Change TYPO3 CMS configuration to use GraphicsMagick for image manipulation
     Install Tool -> Configuration Presets -> Image handling settings -> Graphicks Magick
- Use a policy file to disable the vulnerable ImageMagick coders as described at the [vulnerability disclosure website](https://imagetragick.com)

![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/bb9efc51bced8582e7b8c235f4b5f2b5.png)

About the Author

[Helmut Hummel](https://news.typo3.com/article/author/helmut-hummel)

[More posts by this author](https://news.typo3.com/article/author/helmut-hummel)