OESA-2024-1024 metadata-extractor2 security update

Metadata Extractor is a straightforward Java library for reading metadata from image files. Security Fixes: metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1110 more potentially affected by CVE-2022-24614 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24614 Source advisory: GHSA-4V6P-CXF9-98RF...

CVE-2022-24614

creationtimestamp| type| source ---|---|--- 2022-02-24 18:14:46+00:00| seen| https://t.me/cibsecurity/37995...

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

CVE-2022-24614

CVE-2022-24614 affects the metadata-extractor library (version

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...