We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Arbitrary code execution can occur when running exiftool against files with hostile metadata payloads.
exiftool
ExifTool has already been patched in version 12.24. exiftool-vendored, which vendors ExifTool, includes this patch in v14.3.0.
No.
https://twitter.com/wcbowling/status/1385803927321415687 https://nvd.nist.gov/vuln/detail/CVE-2021-22204
If you have any questions or comments about this advisory:
Impact
Arbitrary code execution can occur when running
exiftoolagainst files with hostile metadata payloads.Patches
ExifTool has already been patched in version 12.24. exiftool-vendored, which vendors ExifTool, includes this patch in v14.3.0.
Workarounds
No.
References
https://twitter.com/wcbowling/status/1385803927321415687
https://nvd.nist.gov/vuln/detail/CVE-2021-22204
For more information
If you have any questions or comments about this advisory: