CVE-2009-3895
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif...
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-3895- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-3895- Updated
- 2026-11-02
EUVDEUVD-2009-3866 No score
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2009-3866- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v836-r6h4-7334 No score
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif...
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
GHSA-v836-r6h4-7334- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVBELL-CVE-2009-3895
CVE-2009-3895 does not affect BellSoft software
- Record
BELL-CVE-2009-3895- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSVALPINE-CVE-2009-3895 No score
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
ALPINE-CVE-2009-3895- Updated
- 2026-11-03
OSV No score
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-3895- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3895 No score
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
- Record
DEBIAN-CVE-2009-3895- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libexifAlpine:v3.10 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.11 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.12 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.13 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.14 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.15 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.16 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.17 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.18 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.19 |
before 0.6.19-r0 | 0.6.19-r0 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libexifAlpine:v3.20 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.21 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.22 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.23 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.24 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.8 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifAlpine:v3.9 |
before 0.6.19-r0 | 0.6.19-r0 |
libexifDebian:12 |
before 0.6.19-1 | 0.6.19-1 |
libexifDebian:13 |
before 0.6.19-1 | 0.6.19-1 |
libexifDebian:14 |
before 0.6.19-1 | 0.6.19-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3895 is a medium vulnerability (CVSS 6.8) in Libexif Project Libexif, published November 20, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.17%, the 92nd percentile. Fixed in libexif 0.6.19-r0.
References
libexif.cvs.sourceforge.net/viewvc/libexif/libexif/NEWS?view=markup&pathrev=libexif-0_6_19-release
secunia.com/advisories/37378
bugs.gentoo.org/show_bug.cgi?id=293190
vupen.com/english/advisories/2009/3243
openwall.com/lists/oss-security/2009/11/19/2
exchange.xforce.ibmcloud.com/vulnerabilities/54275
Show 9 moreShow less
securityfocus.com/bid/37022
osvdb.org/59956
sourceforge.net/mailarchive/message.php?msg_name=20091113072359.GA22681%40coneharvesters.com
bugs.debian.org/557137
nvd.nist.gov/vuln/detail/CVE-2009-3895
github.com/advisories/GHSA-v836-r6h4-7334
security.alpinelinux.org/vuln/CVE-2009-3895
docs.bell-sw.com/security/cves/CVE-2009-3895
security-tracker.debian.org/tracker/CVE-2009-3895