CVE-2021-22204

LLM-synthesized narrative grounded in this CVE's description and references.

• Exiftool/Exiftool3 versions

  cpe:2.3:a:exiftool_project:exiftool:*:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:a:exiftool_project:exiftool:*:*:*:*:*:*:*:*range: >=7.44,<12.24
  • (no CPE)range: >=7.44
  • (no CPE)range: >=7.44, <12.24
• Debian/linux2 versions

  cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
• Fedoraproject/Fedora3 versions

  cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 2 more

  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
• osv-coords3 versions

  pkg:rpm/opensuse/perl-Image-ExifTool&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/perl-Image-ExifTool&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/perl-Image-ExifTool&distro=SUSE%20Package%20Hub%2015%20SP2

  < 12.25-bp152.4.3.1+ 2 more

  • (no CPE)range: < 12.25-bp152.4.3.1
  • (no CPE)range: < 12.25-bp152.4.3.1
  • (no CPE)range: < 12.25-bp152.4.3.1

• github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031nvdPatch
• packetstormsecurity.com/files/162558/ExifTool-DjVu-ANT-Perl-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
• packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
• packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
• packetstormsecurity.com/files/167038/ExifTool-12.23-Arbitrary-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
• hackerone.com/reports/1154542nvdExploitIssue TrackingThird Party Advisory
• www.openwall.com/lists/oss-security/2021/05/09/1nvdMailing ListThird Party Advisory
• www.openwall.com/lists/oss-security/2021/05/10/5nvdMailing ListThird Party Advisory
• gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22204.jsonnvdThird Party Advisory
• lists.debian.org/debian-lts-announce/2021/05/msg00018.htmlnvdMailing ListThird Party Advisory
• www.debian.org/security/2021/dsa-4910nvdMailing ListThird Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDKDLJLBTBBR66OOPXSXCG2PQRM5KCZL/nvdRelease Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F6UOBPU3LSHAPRRJNISNVXZ5DSUIALLV/nvdRelease Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4RF6PJCJ6NQOVJJJF6HN6BORUQVIXY6/nvdRelease Notes
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
  Securelist · May 20, 2026