Description
Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 1 Dec 2021.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.