Vulnerabilidades do Exiftool Project Exiftool
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Exiftool Project Exiftool: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:exiftool_project:exiftool
CVE-2026-3102
Alta · 8.8
CWE-78 24/02/2026
exiftool PNG File MacOS.pm SetMacOSTags os command injection
A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 13.50 is capable of addressing this issue. Patch name: e9609a9bcc0d32bd252a709a562fb822d6dd86f7. Upgrading the affected component is recommended.
CVE-2021-22204
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-94 23/04/2021
ExifTool Remote Code Execution Vulnerability
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image