CyberSecBulletin

ExifTool vulnerabilities

We track 2 vulnerabilities in ExifTool products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on February 24, 2026.

2vulnerabilities
0critical
2high
1exploited
8.3average CVSS score

Latest ExifTool vulnerabilities

  • 8.8 High severity

    exiftool: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-3102ExifToolEPSS 3.95%

    A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injecti

  • 7.8 High severity

    ExifTool Remote Code Execution Exploited

    CVE-2021-22204ExifToolEPSS 100%

    Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image