vulnerability
How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
Critical
Summary
This article details a vulnerability (CVE-2026-3102) in ExifTool for macOS, allowing an attacker to execute arbitrary commands by injecting malicious data into the FileCreateDate metadata field. The vulnerability stems from a lack of sanitization of user-controlled input when parsing image metadata, specifically targeting the system() function. The issue was discovered by Kaspersky’s GReAT and patched shortly after, highlighting the importance of input validation in software libraries.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data