CVE-2021-22204
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
CISA Known Exploited Vulnerability
Vendor / Product
Perl — Exiftool
Date Added
2021-11-17
Remediation Due
2021-12-01
https://nvd.nist.gov/vuln/detail/CVE-2021-22204