LI
Product
libexif
22
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 2Low 0
Watch
Add libexif to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-13112 | 9.1 | May 21 | An issue was discovered in libexif before 0.6.22 Affected: before 0.6.22 |
| CVE-2017-7544 | 9.1 | Sep 21 | libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of… Affected: through 0.6.21 |
| CVE-2020-13113 | 8.2 | May 21 | An issue was discovered in libexif before 0.6.22 Affected: before 0.6.22 |
| CVE-2016-6328 | 8.1 | Oct 31 | A vulnerability was found in libexif Affected: before 0.6.22 |
| CVE-2026-32775 | 7.8 | Mar 16 | libexif through 0.6.25 has a flaw in decoding MakerNotes Affected: through 0.6.25 |
| CVE-2020-0198 | 7.5 | Jun 11 | In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow Affected: before 0.6.22_p20201105 |
| CVE-2020-0181 | 7.5 | Jun 11 | In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow Affected: before 0.6.22_p20201105 |
| CVE-2020-13114 | 7.5 | May 21 | An issue was discovered in libexif before 0.6.22 Affected: before 0.6.22 |
| CVE-2018-20030 | 7.5 | Feb 20 | An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources Affected: 0.6.21 |
| CVE-2026-40386 | 7.1 | Apr 12 | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of… Affected: through 0.6.25 |
| CVE-2026-40385 | 7.1 | Apr 12 | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks Affected: through 0.6.25 |
| CVE-2020-12767 | 5.5 | May 9 | exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error Affected: 0.6.21 |
| CVE-2020-0093 | 5.0 | May 14 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check Affected: before 0.6.22 |
| CVE-2012-2841 | – | Jul 13 | Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code… Affected: 0.6.20 |
| CVE-2012-2840 | – | Jul 13 | Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial… Affected: through 0.6.20; 0.6.14; 0.6.15; 0.6.16; 0.6.18; 0.6.19 |
| CVE-2012-2837 | – | Jul 13 | The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial… Affected: through 0.6.20; 0.6.14; 0.6.15; 0.6.16; 0.6.18; 0.6.19 |
| CVE-2012-2836 | – | Jul 13 | The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds… Affected: through 0.6.20; 0.6.14; 0.6.15; 0.6.16; 0.6.18; 0.6.19 |
| CVE-2012-2814 | – | Jul 13 | Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service… Affected: 0.6.20 |
| CVE-2012-2813 | – | Jul 13 | The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service… Affected: through 0.6.20; 0.6.14; 0.6.15; 0.6.16; 0.6.18; 0.6.19 |
| CVE-2012-2812 | – | Jul 13 | The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds… Affected: through 0.6.20; 0.6.14; 0.6.15; 0.6.16; 0.6.18; 0.6.19 |
| CVE-2009-3895 | – | Nov 20 | Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of… Affected: 0.6.18 |
| CVE-2007-6351 | – | Dec 20 | libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the… Affected: through 0.6.16; 0.6.14; 0.6.15 |
Showing 22