Libexif Project Libexif
22 CVEs affecting Libexif Project Libexif. Latest disclosed: 2026-04-12. Critical: 2, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-13112 | Critical | 9.1 | 2020-05-21 | An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This i… |
CVE-2017-7544 | Critical | 9.1 | 2017-09-21 | libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper l… |
CVE-2020-13113 | High | 8.2 | 2020-05-21 | An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free con… |
CVE-2016-6328 | High | 8.1 | 2018-10-31 | A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Infor… |
CVE-2020-0198 | High | 7.5 | 2020-06-11 | In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no… |
CVE-2020-0181 | High | 7.5 | 2020-06-11 | In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service… |
CVE-2020-13114 | High | 7.5 | 2020-05-21 | An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of comp… |
CVE-2018-20030 | High | 7.5 | 2019-02-20 | An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources. |
CVE-2026-32775 | High | 7.4 | 2026-03-16 | libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be over… |
CVE-2020-12767 | Medium | 5.5 | 2020-05-09 | exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error. |
CVE-2020-0093 | Medium | 5.0 | 2020-05-14 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2026-40386 | Medium | 4.0 | 2026-04-12 | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak informatio… |
CVE-2026-40385 | Medium | 4.0 | 2026-04-12 | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leak… |
CVE-2012-2841 | | 2012-07-13 | Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to exe… | |
CVE-2012-2840 | | 2012-07-13 | Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers… | |
CVE-2012-2837 | | 2012-07-13 | The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers… | |
CVE-2012-2836 | | 2012-07-13 | The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of servic… | |
CVE-2012-2814 | | 2012-07-13 | Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a… | |
CVE-2012-2813 | | 2012-07-13 | The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial o… | |
CVE-2012-2812 | | 2012-07-13 | The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of serv… |