Lucene search

K
mageiaGentoo FoundationMGASA-2020-0426
HistoryNov 15, 2020 - 6:45 p.m.

Updated libexif packages fix a security vulnerability

2020-11-1518:45:05
Gentoo Foundation
advisories.mageia.org
10

0.007 Low

EPSS

Percentile

79.9%

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2020-0452)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchlibexif< 0.6.22-1.2libexif-0.6.22-1.2.mga7