Vulnerabilities > CVE-2022-24613 - Improper Handling of Exceptional Conditions vulnerability in Metadata-Extractor Project Metadata-Extractor

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
metadata-extractor-project
CWE-755
NVD
Published: 2022-02-24
Updated: 2022-03-02

Summary

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library.

Vulnerable Configurations

Part Description Count
Application
Metadata-Extractor_Project
31

Common Weakness Enumeration (CWE)

References