965 matches found
libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...
Moderate: Red Hat Security Advisory: libexif security, bug fix, and enhancement update
An update for libexif is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...
libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...
libexif: integer overflow in exif_data_load_data_content function in exif-data.c
In exifdataloaddatacontent of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-14642894...
libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c
exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-2356)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : libexif (EulerOS-SA-2020-2356)
According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and...
ASB-A-159625731
In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...
EulerOS 2.0 SP5 : libexif (EulerOS-SA-2020-2251)
According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media...
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-2251)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : libexif (ALAS-2020-1523)
The version of libexif installed on the remote host is prior to 0.6.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1523 advisory. In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of...
Medium: libexif
Issue Overview: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions:...
Scientific Linux Security Update : libexif on SL7.x x86_64 (20201001)
Security Fixes : - libexif: out of bound write in exif-data.c CVE-2019-9278 - libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry function in exif-data.c CVE-2020-0093 - libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and...
libexif security update
CentOS Errata and Security Advisory CESA-2020:4040 An update for libexif is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CentOS 7 : libexif (RHSA-2020:4040)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4040 advisory. - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media conten...
Oracle Linux 7 : libexif (ELSA-2020-4040)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4040 advisory. 0.6.22-1 - Upgrade to 0.6.22 - Resolves: 1841316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
FreeBSD : libexif -- multiple vulnerabilities (cff0b2e2-0716-11eb-9e5d-08002728f74c)
Release notes : Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz and others : CVE-2016-6328: fixed integer overflow when parsing maker notes CVE-2017-7544: fixed buffer overread CVE-2018-20030: Fix for recursion DoS CVE-2019-9278: replaced integer overflow checks the compiler could...
Denial Of Service (DoS)
libexif is vulnerable to denial of service. Unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time and a potential application crash...