external_libexif_AOSP10_CVE-2020-0452

libexif ------- 説明 libexif は、EXIF データの解析、編集、保存を行うためのライブラリです。コマンドラインユーティリティや GUI プログラムにおける多くの重複した実装を置き換えることを目的としています。 特徴 libexif は EXIF データの解析、編集、保存をサポートしています。さらに、gettext による国際化対応も備えています。EXIF 標準 2.1（および 2.2 の大部分）で記述されているすべての EXIF タグをサポートしています。また、Canon、Casio、Epson、Fuji、Nikon、Olympus、Pentax、Sanyo...

external_libexif_AOSP10_r33_CVE-2020-0181

libexif ------- 描述 libexif 是一个用于解析、编辑和保存 EXIF 数据的库。它旨在取代命令行工具和 GUI 程序中大量冗余的实现。 特性 libexif 支持 EXIF 数据的解析、编辑和保存。此外，它还具有 gettext 支持。支持 EXIF 标准 2.1（以及大部分 2.2）中描述的所有 EXIF 标签。还支持来自佳能、卡西欧、爱普生、富士、尼康、奥林巴斯、宾得和三洋相机的许多制造商注释。 依赖 libexif 用纯 C 语言编写，不需要任何额外的库。如果可用，将使用 GNU gettext 进行语言翻译。 限制 libexif...

OESA-2026-3966 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may va...

CVE-2026-90681

A flaw was found in Matthias-Wandel jhead. A local attacker could exploit an out-of-bounds read vulnerability in the EXIF Exchangeable Image File Format parsing component, specifically within the Get16u function. This could lead to a denial of service, making the application unavailable. Mitigati...

DEBIAN-CVE-2026-90681

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

CVE-2026-90681

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

CVE-2026-90681

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

UBUNTU-CVE-2026-90681

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

CVE-2026-90681 Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

CVE-2026-90681

An out-of-bounds read vulnerability exists in Matthias-Wandel jhead up to version 3.3 , specifically in the function Get16u within exif.c of the EXIF Parsing component. The flaw is exploitable via local access and results in a low availability impact, rated LOW (CVSS 3.1 base score 3.3; CVSS 4.0 ...

EUVD-2026-77197

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

CVE-2026-90681 Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

Linux Distros Unpatched Vulnerability : CVE-2026-90681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This...

PT-2026-91044

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090433 advisory. In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exifreaddata function, it is possible for malicious data to...

MGASA-2026-0394 Updated perl-Imager packages fix a security vulnerability

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

UBUNTU-CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

SUSE-SU-2026:23059-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issue: - CVE-2024-4453: lack of proper validation of user-supplied data when parsing EXIF metadata bsc1224806...