Alpine/perl-image-exiftool: high 7.8
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Action: Upgrade perl-image-exiftool to 12.24-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.24-r0 | - |
Fixed versions
| 12.24-r0 |
Sources
- osv: ALPINE-CVE-2021-22204#Alpine:v3.20/perl-image-exiftool
- https://security.alpinelinux.org/vuln/CVE-2021-22204
published · modified · JSON