[CVE-2023-21036] How to avoid the aCropalypse

CVE

CVE-2023-21036

Published

2023-03-30 12:00

Collected

2026-07-03 04:00

---
id: 1679
title: "[CVE-2023-21036] How to avoid the aCropalypse"
cve: CVE-2023-21036
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/03/30/acropalypse-polytracker-blind-spots/"
published_at: "2023-03-30T12:00:22Z"
tags: ["privacy", "vulnerability", "image-parsing", "trail-of-bits", "acropalypse", "cve-2023-21036", "polytracker", "data-recovery", "file-format"]
phying_url: "https://phying.com/item/1679"
lang: en
---

# [CVE-2023-21036] How to avoid the aCropalypse

## Summary

Trail of Bits shows how PolyTracker detects aCropalypse (CVE-2023-21036) affected files by finding parser blind spots in images edited with Google Pixel Markup or Windows Snipping Tool.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **CVE:** CVE-2023-21036
- **Published:** 2023-03-30T12:00:22Z
- **Original:** https://blog.trailofbits.com/2023/03/30/acropalypse-polytracker-blind-spots/
- **Phying News:** https://phying.com/item/1679