Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif prior to 0.6.16 allows remote malicious users to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
libexif libexif 0.6.12 |
||
libexif libexif 0.6.13 |
||
libexif libexif 0.6.11 |
||
libexif libexif 0.6.9 |
||
libexif libexif 0.6.14 |
||
libexif libexif 0.6.15 |