← Back

Metadata Extractor

metadata-extractor

Vendor: Metadata Extractor Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24614
1Metadata Extractor Project
1Metadata Extractor
Jun 17, 2026
Feb 24, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to m...Show more
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.Show less
CVE-2022-24613
1Metadata Extractor Project
1Metadata Extractor
Jun 17, 2026
Feb 24, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack agains...Show more
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library.Show less