29 results · Feed
-
Medium 4.0
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used …
-
Medium 4.0
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attack…
-
High 7.4
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 …
-
Unscored —CVE-2020-0452 Public exploit
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could…
-
Unscored —CVE-2020-0181 Public exploit
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This…
-
Unscored —CVE-2020-0198 Public exploit
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could l…
-
Unscored —
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This cou…
-
Unscored —
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to …
-
Unscored —
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to in…
-
Unscored —
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead…
-
Unscored —
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
-
Unscored —
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of…
-
Unscored —
An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be expl…
-
Medium 6.1CVE-2016-6328 Public exploit
A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can…
-
Unscored —
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in …
-
Unscored —
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.…
-
Unscored —
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexi…
-
Unscored —
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexi…
-
Unscored —
The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 all…
-
Unscored —
Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0…
-
Unscored —
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remo…
-
Unscored —
The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows re…
-
Unscored —
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexi…
-
Unscored —
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an …
-
Unscored —
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an imag…
-
Unscored —
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remot…
-
Unscored —
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted…
-
Unscored —
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which al…