Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Confirm exposure before applying a vendor-supported change.
Apply updates per vendor instructions.
Due date: 2021.12.01Confirm that Perl Exiftool and an affected version are present.
Combine exploitation signals with asset exposure and business criticality.
Follow the vendor advisory or supported update path and preserve rollback options.
Recheck the version, service health, access paths, and relevant logs.
