Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-22204 — Exploit script for CVE-2021-22204, an RCE vulnerability in ExifTool via malicious DjVu files, targeting versions 7.44 to 12.23. | Kitploit
Tools/GitHubGitHub/cc3305/cve-2021-22204
Vulnerability AnalysisExploitationWeb Application ExploitationPapers & ResearchLearning & Education
GitHubcc3305/cve-2021-22204

CVE-2021-22204

Exploit script for CVE-2021-22204, an RCE vulnerability in ExifTool via malicious DjVu files, targeting versions 7.44 to 12.23.

View Repository
42 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-22204

Summary of the CVE

Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image.

Affected Versions

  • Version 7.44 - 12.23

Anomalies

  • Dependencies: djvulibre-bin exiftool
  • Calls these three commands: [bzz, dvjumake, exiftool]

References

  • Github POC - Gustavo Dutra, May 11 2021
  • A case study on: CVE-2021-22204 Exiftool RCE - Gustavo Dutra, May 19 2021
  • CVE-details - CVSS Score 6.8
Download Tool