CVE-2022-24613

Published: Feb 24, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library.

Affected (1)

Products: Metadata Extractor Project: Metadata Extractor

Metadata Extractor Project

1 product

Metadata Extractor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Metadata Extractor Project Metadata Extractor	Before 2.18.0

Related CWEs

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (2)

https://github.com/drewnoakes/metadata-extractor/issues/561

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/drewnoakes/metadata-extractor/issues/561

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.