PatchTheCVEmetadata-extractor vulnerabilities and fixes
Recent CVEs affecting metadata-extractor, with upgrade or downgrade steps. 2 tracked.
Also searched as: metadata extractor.
metadata-extractor has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-02-24. Highest priority: CVE-2022-24614 (score 38/100).
- CVE-2022-24614 MEDIUM 5.5 UPGRADE When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amou
- CVE-2022-24613 MEDIUM 5.5 UPGRADE metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG f
FAQ
How do I fix metadata-extractor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is metadata-extractor being exploited right now?
None of the tracked metadata-extractor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which metadata-extractor CVE should I patch first?
CVE-2022-24614 currently ranks highest (38/100): When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amou.