Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

libexif project libexif 0.6.21 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2018-20030
An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.
Libexif Project Libexif 0.6.21
NA
CVE-2012-2836
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) prior to 0.6.21 allows remote malicious users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an i...
Libexif Project Libexif 0.6.14Libexif Project Libexif 0.6.15Libexif Project Libexif 0.6.16Libexif Project Libexif 0.6.18Libexif Project Libexif 0.6.19Libexif Project Libexif
NA
CVE-2012-2840
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) prior to 0.6.21 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
Libexif Project Libexif 0.6.14Libexif Project Libexif 0.6.15Libexif Project Libexif 0.6.16Libexif Project Libexif 0.6.18Libexif Project Libexif 0.6.19Libexif Project Libexif
NA
CVE-2012-2812
The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) prior to 0.6.21 allows remote malicious users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an...
Libexif Project Libexif 0.6.14Libexif Project Libexif 0.6.15Libexif Project Libexif 0.6.16Libexif Project Libexif 0.6.18Libexif Project Libexif 0.6.19Libexif Project Libexif
NA
CVE-2012-2813
The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) prior to 0.6.21 allows remote malicious users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags...
Libexif Project Libexif 0.6.14Libexif Project Libexif 0.6.15Libexif Project Libexif 0.6.16Libexif Project Libexif 0.6.18Libexif Project Libexif 0.6.19Libexif Project Libexif
NA
CVE-2012-2837
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) prior to 0.6.21 allows remote malicious users to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly ha...
Libexif Project Libexif 0.6.14Libexif Project Libexif 0.6.15Libexif Project Libexif 0.6.16Libexif Project Libexif 0.6.18Libexif Project Libexif 0.6.19Libexif Project Libexif
9.1
CVSSv3
CVE-2017-7544
libexif up to and including 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly i...
Libexif Project Libexif
5.5
CVSSv3
CVE-2020-12767
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
Libexif Project Libexif 0.6.21Debian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Opensuse Leap 15.1
7.5
CVSSv3
CVE-2020-13114
An issue exists in libexif prior to 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
Libexif Project LibexifCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Opensuse Leap 15.1
8.2
CVSSv3
CVE-2020-13113
An issue exists in libexif prior to 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
Libexif Project LibexifDebian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Opensuse Leap 15.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook