Data Leakage and Cropping Bugs Found in Google Markup and Windows Photo-Cropping Tools

A vulnerability in Google's photo-cropping tool, Markup, and Windows' photo-cropping utilities, Snipping Tool and Snip & Sketch, has been discovered that leaves data in a cropped image file that can be used to reconstruct some or all of the original image beyond the confines of the crop. The vulnerability is significant because users have been making and sharing cropped images that may still contain private or sensitive data. The vulnerability was discovered by security researcher Simon Aarons and fellow reverse engineer David Buchanan. Microsoft is investigating the issue, and Google has released a patch for its flagship Pixel smartphones.