ExifTool vulnerable to arbitrary code execution
### Impact
Arbitrary code execution can occur when running `exiftool` against files with hostile metadata payloads
### Patches
ExifTool has already been patched in version 12.24. `exiftool_vendored.rb`, which vendors ExifTool, includes this patch in v12.25.0
https://github.com/exiftool-rb/exiftool_vendored.rb/releases/tag/v12.25.0.
### Workarounds
No
### References
https://twitter.com/wcbowling/status/1385803927321415687
https://nvd.nist.gov/vuln/detail/CVE-2021-22204
### For more information
If you have any questions or comments about this advisory:
Open an issue in exiftool_vendored.rb
https://github.com/exiftool-rb/exiftool_vendored.rb/issues