drewnoakes/metadata-extractor
GitHub
Releases39
Frequency7 months 2 weeks
Last Release
Stars2.79K
Extracts Exif, IPTC, XMP, ICC and other metadata from image, video and audio files
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 5.5 MEDIUM | 4.3 MEDIUM | ||
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library. | |||
| 5.5 MEDIUM | 4.3 MEDIUM | ||
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library. | |||