exiftool project records
4 published records for vendor exiftool project.
Researcher profile
- Entered KEV
- 1 · 25%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 1
- With a fix record
- 75%
- Median publish → KEV
- 208 days
Recurring classes
- CWE-427 Uncontrolled Search Path Element1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
91Now | CVE-2021-22204Weaponized | Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing texiftool project · exiftool · CWE-94 | High7.8 | KEV | 100.0% | Apr 23, 2021 |
33Monitor | CVE-2022-23935Proof of concept | lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.exiftool project · exiftool · CWE-78 | High7.8 | — | 7.6% | Jan 25, 2022 |
31Monitor | CVE-2018-20211No exploit | ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username,exiftool project · exiftool · CWE-427 | High7.8 | — | 1.4% | Jan 2, 2019 |
9Monitor | CVE-2026-3102Proof of concept | exiftool PNG File MacOS.pm SetMacOSTags os command injectionexiftool project · exiftool · CWE-77 | Low2.1 | — | 2.9% | Feb 24, 2026 |
- CVE-2021-2220491Now
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing t
HighCVSS 7.8KEVWeaponizedEPSS 100%exiftool project · exiftoolApr 23, 2021
- CVE-2022-2393533Monitor
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
HighCVSS 7.8Proof of conceptEPSS 8%exiftool project · exiftoolJan 25, 2022
- CVE-2018-2021131Monitor
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username,
HighCVSS 7.8No exploitEPSS 1%exiftool project · exiftoolJan 2, 2019
- CVE-2026-31029Monitor
exiftool PNG File MacOS.pm SetMacOSTags os command injection
LowCVSS 2.1Proof of conceptEPSS 3%exiftool project · exiftoolFeb 24, 2026