UBUNTU-CVE-2020-0182

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

Libexif Digit Error Vulnerability

libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A numeric error vulnerability exists in the exifentrygetvalue file in exif-entry.c in libexif version 0.6.21. The vulnerability arises from a network system ...

ALPINE-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

DEBIAN-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

UBUNTU-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

libexif: "exif_entry_get_value()" integer underflow

Integer underflow in the exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer...

libexif: "exif_entry_format_value()" buffer overflow

Buffer overflow in the exifentryformatvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

CVE-2012-2812

The exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory via crafted EXIF tags in an image...

DEBIAN-CVE-2012-2812

The exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory via crafted EXIF tags in an image...

CVE-2009-3895

Heap-based buffer overflow in the exifentryfix function aka the tag fixup routine in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party...

PT-2009-6117 · None · Libexif

Name of the Vulnerable Software and Affected Versions: libexif version 0.6.18 Description: The issue is related to a heap-based buffer overflow in the exif entry fix function, which can be triggered by an invalid EXIF image. This could lead to a denial of service or potentially allow the executio...