--- title: ExifTool CVE-2021-22204 - Arbitrary Code Execution description: The post discusses a bug in ExifTool that allows for arbitrary code execution. The author discovered the bug while examining a bug bounty program and noticed... canonical: https://daily.dev/posts/exiftool-cve-2021-22204---arbitrary-code-execution-ks5smojrq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: ExifTool CVE-2021-22204 - Arbitrary Code Execution | daily.dev og:description: The post discusses a bug in ExifTool that allows for arbitrary code execution. The author discovered the bug while examining a bug bounty program and noticed... og:url: https://daily.dev/posts/exiftool-cve-2021-22204---arbitrary-code-execution-ks5smojrq og:image: https://api.daily.dev/og/posts/ks5sMojRQ.png og:image:alt: ExifTool CVE-2021-22204 - Arbitrary Code Execution og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # ExifTool CVE-2021-22204 - Arbitrary Code Execution **[Hacker News](https://daily.dev/sources/hn)** · 16 min read · 0 upvotes · 0 comments ## Summary The post discusses a bug in ExifTool that allows for arbitrary code execution. The author discovered the bug while examining a bug bounty program and noticed they were using an older version of ExifTool. The bug involves the use of the 'eval' function in Perl, which can be abused to execute code. The post also mentions potential formats that can be used to trigger the bug, such as DjVu and TIFF. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#perl](https://daily.dev/tags/perl) [View this post on daily.dev](https://daily.dev/posts/exiftool-cve-2021-22204---arbitrary-code-execution-ks5smojrq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"ExifTool CVE-2021-22204 - Arbitrary Code Execution","url":"https://daily.dev/posts/exiftool-cve-2021-22204---arbitrary-code-execution-ks5smojrq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/exiftool-cve-2021-22204---arbitrary-code-execution-ks5smojrq"},"datePublished":"2024-01-27T13:27:51.155Z","dateModified":"2024-05-09T08:58:27.770Z","description":"The post discusses a bug in ExifTool that allows for arbitrary code execution. The author discovered the bug while examining a bug bounty program and noticed...","image":"https://media.daily.dev/image/upload/s--foaA6JGU--/f_auto/v1722860399/public/Placeholder%2004","thumbnailUrl":"https://media.daily.dev/image/upload/s--foaA6JGU--/f_auto/v1722860399/public/Placeholder%2004","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/exiftool-cve-2021-22204---arbitrary-code-execution-ks5smojrq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"perl","timeRequired":"PT16M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"ExifTool CVE-2021-22204 - Arbitrary Code Execution"}]} ```