Exiftool Project - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2026-02-24.

Products

• Exiftool - 4 CVEs

Newest CVEs of Exiftool Project

• CVE-2026-3102 - CVSS 8.8 (high), 2026-02-24: A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the…
• CVE-2022-23935 - CVSS 7.8 (high), 2022-01-25: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
• CVE-2021-22204 - CVSS 7.8 (high), 2021-04-23: Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
• CVE-2018-20211 - CVSS 7.8 (high), 2019-01-02: ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying…