PT-2022-16762

CVE-2022-24613

Published

2022-02-24

Updated

2024-01-12

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions metadata-extractor versions up to 2.16.0

Description The issue allows an application crash due to uncaught exceptions when parsing a specially crafted JPEG file, potentially leading to a denial of service attack against services using the metadata-extractor library.

Recommendations For metadata-extractor versions up to 2.16.0, update to a version later than 2.16.0 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Exploitability

Exploit

Fix

Impacts

Researchers

Huang Wenjie

Zhang Cen

Zhang Xiaohan

Vendors

Affected products

Weakness enumeration

CWE-755: Improper Handling of Exceptional Conditions