Cybersecurity Alerts

ExifTool Remote Code Execution Vulnerability

Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-95

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-22204