ExifTool vulnerabilities

2 known vulnerabilities in ExifTool from ExifTool. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  exiftool: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-3102Feb 24, 2026ExifToolEPSS 3.95%

  A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injecti

• 7.8 High severity

  ExifTool Remote Code Execution Exploited

  CVE-2021-22204Apr 23, 2021ExifToolEPSS 100%

  Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image