6.4
CVSSv2

CVE-2017-7544

Published: 21/09/2017 Updated: 11/06/2020
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

libexif up to and including 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libexif project libexif

Vendor Advisories

Several security issues were fixed in libexif ...
Debian Bug report logs - #873022 libexif: CVE-2016-6328: Integer overflow in parsing MNOTE entry data of the input file Package: src:libexif; Maintainer for src:libexif is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 23 A ...
Debian Bug report logs - #876466 libexif: CVE-2017-7544: Out-of-bounds heap read in exif_data_save_data_entry function Package: src:libexif; Maintainer for src:libexif is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 22 Se ...
libexif through 0621 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-datac caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure ...
Severity Unknown Remote Unknown Type Unknown Description AVG-1166 libexif 0621-1 0622-1 Unknown Vulnerable ...