CVE-2020-0452

CVE-2020-0452 affects libexif; the issue is an out-of-bounds write caused by an integer overflow in exif-entry.c, potentially enabling remote code execution when processing remote image data. Multiple connected advisories (CentOS RHSA-2020:5402, ALSA-2020:5393 for AlmaLinux, Amazon Linux ALAS2-20...

CVE-2020-0452

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

USN-4624-1: libexif vulnerability

It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause unexpected behaviours, or execute arbitrary code...

CVE-2020-0452

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

UBUNTU-CVE-2020-0452

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...

libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c

In exifdataloaddatathumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID...

libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c

In exifdatasavedataentry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0...

libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android I...

libexif: out of bounds write in exif-data.c

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-2356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-1250 · Google +9 · Android +9

Name of the Vulnerable Software and Affected Versions: Android versions 8.0 through 11 Description: The issue is related to a possible out of bounds write due to an integer overflow in the exif entry get value function of the exif-entry.c component. This could lead to remote code execution if a...

Amazon Linux 2 : libexif (ALAS-2020-1523)

The version of libexif installed on the remote host is prior to 0.6.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1523 advisory. In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of...

Oracle Linux 7 : libexif (ELSA-2020-4040)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4040 advisory. 0.6.22-1 - Upgrade to 0.6.22 - Resolves: 1841316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Denial Of Service (DoS)

libexif is vulnerable to denial of service. Unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time and a potential application crash...

Divide-by-zero Error

The libexif has divide-by-zero error in exifentrygetvalue function in exif-entry.c...

Information Disclosure

libexif is vulnerable to information disclosure.Attacker get the information through an out of bounds read due to a missing bounds check in exifdatasavedataentry function in exif-data.c...

Information Disclosure

libexif is vulnerable to information disclosure. An out-of-bounds read due to a missing bounds check in exifentrygetvalue function in exif-entry.c allows an attacker to obtain confidential information from memory and a potentially crash the application...