CVE-2022-24614 in metadata-extractor

Tóm tắt

Bởi MITRE • 24/02/2022

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 07/02/2022
• Tiết lộ: 24/02/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-193779
• CPE: sẵn sàng
• CWE: CWE-400 (Đã xác nhận)
• CVSS: 5.5 (NVD)
• EPSS: 0.00717
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-24614
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-24614
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-24614/