LI
Product
libexif
22
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 2Low 0
Watch
Add libexif to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-13113 | 8.2 | May 21 | An issue was discovered in libexif before 0.6.22 Affected: before 0.6.22 |
| CVE-2016-6328 | 8.1 | Oct 31 | A vulnerability was found in libexif Affected: before 0.6.22 |
| CVE-2026-32775 | 7.8 | Mar 16 | libexif through 0.6.25 has a flaw in decoding MakerNotes Affected: through 0.6.25 |
| CVE-2020-0198 | 7.5 | Jun 11 | In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow Affected: before 0.6.22_p20201105 |
| CVE-2020-0181 | 7.5 | Jun 11 | In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow Affected: before 0.6.22_p20201105 |
| CVE-2020-13114 | 7.5 | May 21 | An issue was discovered in libexif before 0.6.22 Affected: before 0.6.22 |
| CVE-2018-20030 | 7.5 | Feb 20 | An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources Affected: 0.6.21 |
| CVE-2026-40386 | 7.1 | Apr 12 | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of… Affected: through 0.6.25 |
| CVE-2026-40385 | 7.1 | Apr 12 | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks Affected: through 0.6.25 |
Showing 9