TI-2026-02679 CVE-2026-3102 · GHSA-mr6q-w873-6jfr
exiftool PNG File MacOS.pm SetMacOSTags os command injection
Priority MEDIUM 57
A vulnerability was determined in exiftool up to 13.49 on macOS.
Vulnerabilities
4 records
TI-2022-07911 CVE-2022-23935 · GHSA-jx53-3cxj-386g
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
Priority MEDIUM 44
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
TI-2021-05190 CVE-2021-22204 · GHSA-9377-7hwr-p4w6
Code injection in ExifTool
Priority CRITICAL 91KEV
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
TI-2018-14322 CVE-2018-20211 · GHSA-cj4c-xvfc-fw73
ExifTool 8.32 allows local users to gain privileges by creating a…
Priority LOW 37
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws32_32.dll file into this new folder, aka DLL…