CVE-2021-22204 Perl Exiftool
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
- CVSS
- not scored
On CISA’s exploited list
ExifTool Remote Code Execution Vulnerability
- Added
- 2021-11-17
- Federal patch deadline
- 2021-12-01
- Ransomware use
- not known