libexif -- privilege escalation

Mitre reports: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation...

Denial Of Service (DoS)

libexif is vulnerable to denial of service. The exifentrygetvalue function in exif-entry.c does not properly process Exif tags, allowing a remote attacker to crash the process or obtain confidential information in an out-of-bounds read via a malicious EXIF tag in an image...

CVE-2018-20030

An error when processing the EXIFIFDINTEROPERABILITY and EXIFIFDEXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources...

libexif EXIF_IFD_INTEROPERABILITY / EXIF_IFD_EXIF Denial of Service Vulnerability

libexif is a library of functions written in C to read and write EXIF meta-information from graphics files. A denial of service vulnerability exists in libexif EXIFIFDINTEROPERABILITY / EXIFIFDEXIF. An attacker can exploit the vulnerability to cause a DoS Denial of Service...

Libexif Integer Overflow Vulnerability

libexif is a library of functions written in C to read and write EXIF meta-information from graphics files. An integer overflow vulnerability exists in libexif. An attacker could exploit this vulnerability to cause a denial of service and information disclosure including: metadata for important...

Information Disclosure

libexif.so is vulnerable to information disclosure. A buffer overread and integer overflow occur when decoding pentax makernote entries of an input file, which discloses confidential information such as heap chunk metadata and applications' private data. It may also result in a denial of service...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

DEBIAN-CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

ALPINE-CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

UBUNTU-CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

Integer overflow

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

CVE-2016-6328 affects the libexif library, where an integer overflow during parsing of the MNOTE entry data in input files can lead to Denial-of-Service and Information Disclosure (including sensitive heap data). Public remediation exists: Debian LTS fixed in libexif 0.6.21-2+deb8u2; Cloud Foundr...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328: Integer Overflow or Wraparound

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

libexif/exif_loader_fuzzer: Use-of-uninitialized-value in exif_mnote_data_olympus_load

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=6333153978351616 Project: libexif Fuzzer: libFuzzerlibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-val...

libexif/exif_loader_fuzzer: Heap-buffer-overflow in exif_mnote_data_olympus_load

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=5187910488817664 Project: libexif Fuzzer: afllibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: aflasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...