Lucene search
+L

965 matches found

OSV
OSV
added 2019/09/27 7:15 p.m.4 views

ALPINE-CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS7.4AI score0.04059EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/27 7:15 p.m.34 views

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS7.7AI score
SaveExploits0References15
OSV
OSV
added 2019/09/27 7:15 p.m.1 views

DEBIAN-CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS7.8AI score0.04059EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/27 7:15 p.m.19 views

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS8.6AI score0.04059EPSS
SaveExploits0References15
Prion
Prion
added 2019/09/27 7:15 p.m.28 views

Integer overflow

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

6.8CVSS8AI score0.04059EPSS
SaveExploits0References15Affected Software5
UbuntuCve
UbuntuCve
added 2019/09/27 7:15 p.m.30 views

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS7.1AI score0.04059EPSS
SaveExploits0References3
OSV
OSV
added 2019/09/27 7:15 p.m.6 views

UBUNTU-CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS7.2AI score0.04059EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2019/09/27 6:05 p.m.28 views

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.6AI score0.04059EPSS
SaveExploits0References15
CVE
CVE
added 2019/09/27 6:05 p.m.461 views

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

8.8CVSS8.5AI score0.04059EPSS
SaveExploits0References15Affected Software1
Debian CVE
Debian CVE
added 2019/09/27 6:05 p.m.28 views

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS8.1AI score0.04059EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2019/09/27 6:05 p.m.46 views

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

8.8CVSS8.8AI score0.04059EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/09/24 12:00 a.m.35 views

EulerOS 2.0 SP3 : libexif (EulerOS-SA-2019-2036)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows...

8.1CVSS6.7AI score0.01676EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/09/17 12:00 a.m.34 views

EulerOS 2.0 SP2 : libexif (EulerOS-SA-2019-1850)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows...

8.1CVSS6.7AI score0.01676EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/07/25 12:00 a.m.39 views

EulerOS 2.0 SP8 : libexif (EulerOS-SA-2019-1781)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows...

7.8CVSS6.4AI score0.03798EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
added 2019/06/16 3:50 p.m.21 views

libexif/exif_loader_fuzzer: Crash in exif_mnote_data_olympus_load

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=5122581017919488 Project: libexif Fuzzer: libFuzzerlibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash...

6.8AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2019/05/07 12:00 a.m.81 views

Fedora Update for libexif FEDORA-2019-e2f47b40a3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS6.5AI score0.03798EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
added 2019/05/02 3:22 p.m.25 views

libexif/exif_loader_fuzzer: Heap-buffer-overflow in exif_entry_get_value

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=5741716067319808 Project: libexif Fuzzer: libFuzzerlibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow REA...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.23 views

Denial Of Service (DoS)

The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...

7.5CVSS6.7AI score0.07557EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.47 views

Denial Of Service (DoS)

The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...

7.5CVSS6.7AI score0.07557EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2019/05/02 4:43 a.m.32 views

Arbitrary Code Execution And Denial Of Service (DoS)

The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...

7.5CVSS6.7AI score0.07557EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder