GHSA-q95h-cqrv-8jv5

ExifTool vulnerable to arbitrary code execution

7.8 HighFix available

GHSA-q95h-cqrv-8jv5 is a high vulnerability (CVSS 7.8) in exiftool_vendored, published January 20, 2023. No source lists public exploit code. Fixed in exiftool_vendored 12.25.0.

What does this mean?

Severity: 7.8 HighCVSS 3.1, GitHub Advisories
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 12.25.0exiftool_vendored +1 more

Description

Impact

Arbitrary code execution can occur when running exiftool against files with hostile metadata payloads

Patches

ExifTool has already been patched in version 12.24. exiftool_vendored.rb, which vendors ExifTool, includes this patch in v12.25.0.

Workarounds

References

https://twitter.com/wcbowling/status/1385803927321415687 https://nvd.nist.gov/vuln/detail/CVE-2021-22204

For more information

If you have any questions or comments about this advisory:

Open an issue in exiftool_vendored.rb

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Affected packages

Affected packages
Package	Affected	Fixed
`exiftool_vendored` RubyGems	before 12.25.0	12.25.0
`exiftool_vendored` RubyGems	before 12.25.0, plus listed versions 10.01.010.04.010.23.010.25.010.31.0 Show 45 moreShow less 10.40.010.43.010.49.010.56.010.58.010.65.011.41.011.41.111.42.011.42.111.42.211.42.311.42.411.42.511.43.011.44.011.47.011.48.011.49.011.50.011.51.011.52.011.53.011.54.011.55.011.57.011.60.011.61.011.62.011.63.011.64.011.65.011.67.011.68.011.69.011.70.011.71.011.75.011.75.111.76.011.77.011.78.011.79.011.80.011.84.0	12.25.0