CVE-2021-22204VulnerabilityPublished 11/17/2021Updated 10/24/2026

CVE-2021-22204: ExifTool Remote Code Execution Vulnerability

Affects Perl ExiftoolSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/17/2021
KEV deadline: 12/01/2021
EPSS: 100.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-22204 (opens in a new tab)

Description

CVE-2021-22204 is a high-severity remote code execution vulnerability in ExifTool affecting versions 7.44 and later. The flaw arises from improper neutralization of user data in the DjVu file format, enabling arbitrary code execution when parsing a crafted malicious image. This vulnerability has been exploited in the wild.

Summary

ExifTool versions 7.44 and later contain a vulnerability (CVE-2021-22204) due to improper neutralization of user-supplied data in the DjVu file format parser. This flaw allows attackers to execute arbitrary code remotely by crafting malicious DjVu images that, when processed by ExifTool, trigger the vulnerability. The issue is classified under CWE-95 (Improper Neutralization of Directives in Dynamically Evaluated Code). Exploitation has been observed in the wild, indicating active threat usage.

Impact

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on systems running vulnerable versions of ExifTool. This can lead to full system compromise depending on the privileges of the ExifTool process. The vulnerability has been actively exploited in the wild, increasing the risk to affected users.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted DjVu files with vulnerable versions of ExifTool. Monitor vendor channels for updates and apply patches promptly once released.

Weaknesses

CWE-95Eval Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:55:25 UTC

Weaknesses

References

Related threats