Skip to content
OpenAdvisories
Unscored DSA-1487-1 3 CVEs

libexif - several vulnerabilities

Published Feb 8, 2008 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 libexif 0.6.9-6sarge2
Debian · 4.0 libexif 0.6.13-5etch2

Vulnerabilities 3

  • Unscored —
    CVE-2007-2645 Public exploit EPSS 13%

    Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted…

  • Unscored —

    libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an …

  • Unscored —

    Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an imag…