Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-12-01. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 3 products
| Date | Total | Labels |
|---|
| 2026-03-10 | 1 | Patch1 |
| 2026-08-28 | 2 | Disclo1General1 |
4/ Key detail: CVE-2021-22204 = ExifTool CVE-2021-22205 = GitLab This vulnerability was rated CVSS 10.0 Critical.
Post summary
The post simply lists CVE-2021-22204 for ExifTool and CVE-2021-22205 for GitLab, noting a CVSS 10.0 Critical rating, but offers no additional technical, exploit, or remediation details.
1/ GitLab used ExifTool to process metadata from uploaded files. But a vulnerability in ExifTool itself, CVE-2021-22204, allowed arbitrary code execution.
Post summary
The statement notes that GitLab uses ExifTool, and that CVE‑2021‑22204 in ExifTool permits arbitrary code execution, but provides no further details on PoC, exploitation, or remediation.
Critical ExifTool vulnerability (CVE-2021-22204) allows remote code execution via malicious images. Update to version 12.24+ immediately to secure your systems. Link: https://thedailytechfeed.com/critical-exiftool-flaw-allows-remote-code-execution-via-malicious-images-prompt-update-advised/ #Security #Vulnerability #Update #Malware #Patch #Software #Threat #Hacking #Exploit #Protection #Attack #IT #Technology #System #Bug #Network #Data #Safety #Digital #Cyber
Post summary
The post announces CVE-2021-22204 in ExifTool, warns of remote code execution via malicious images, and urges users to upgrade to version 12.24+ to apply the patch.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| App | exiftool_project | exiftool | - | - | - |
| OS | fedoraproject | fedora | 32 | - | - |
| OS | fedoraproject | fedora | 33 | - | - |
| OS | fedoraproject | fedora | 34 | - | - |