Lucene search
+L

2 matches found

OSV
OSV
•added 2026/05/05 7:53 p.m.•46 views

GHSA-CW26-7653-2RP5 exiftool-vendored vulnerable to argument injection via newline characters in tag names

Impact exiftool-vendored starts ExifTool in -stayopen True -@ - mode, where arguments are read from stdin one per line. In affected versions, several caller-supplied strings were interpolated into ExifTool arguments without rejecting line delimiters. A newline or carriage return inside one of tho...

8.2CVSS6.4AI score0.00531EPSS
SaveExploits0References5
Rows per page
Query Builder