Every CVE Search/ Get API key

CVE-2012-2837

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag...

5.0 MediumFix available

CVE-2012-2837 is a medium vulnerability (CVSS 5.0) in Libexif Project Libexif, published July 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.89%, the 90th percentile. Fixed in libexif 0.6.21-r0.

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Exploit likelihood

3.89%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
CVE-2012-2837
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
CVE-2012-2837
Updated
2026-11-02
EUVDEUVD-2012-2817 No score

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
EUVD-2012-2817
Updated
2026-11-03
GitHub AdvisoriesGHSA-365p-hvj9-f68w No score

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag...

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
GHSA-365p-hvj9-f68w
Updated
2026-11-02
OSVBELL-CVE-2012-2837 5.0

CVE-2012-2837 does not affect BellSoft software

Record
BELL-CVE-2012-2837
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVALPINE-CVE-2012-2837 No score

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
ALPINE-CVE-2012-2837
Updated
2026-11-03
OSV No score

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
CVE-2012-2837
Updated
2026-11-02
OSVDEBIAN-CVE-2012-2837 No score

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Record
DEBIAN-CVE-2012-2837
Updated
2026-11-02
OSVopenSUSE-SU-2024:10510-1 No score

libexif-devel-0.6.21-10.8 on GA media

These are all security issues fixed in the libexif-devel-0.6.21-10.8 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10510-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libexif
Alpine:v3.10
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.11
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.12
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.13
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.14
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.15
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.16
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.17
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.18
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.19
 before 0.6.21-r0
0.6.21-r0
Show 32 moreShow less
Affected packages
PackageAffectedFixed
libexif
Alpine:v3.20
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.21
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.22
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.23
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.24
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.8
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.9
 before 0.6.21-r0
0.6.21-r0
libexif
Debian:12
 before 0.6.20-3
0.6.20-3
libexif
Debian:13
 before 0.6.20-3
0.6.20-3
libexif
Debian:14
 before 0.6.20-3
0.6.20-3
libexif
Debian:6.0
 before 0.6.19-1+squeeze1, plus listed versions
0.6.19-1
0.6.19-1+squeeze1
libexif
Red Hat:enterprise_linux:5::client
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif
Red Hat:enterprise_linux:5::client_workstation
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif
Red Hat:enterprise_linux:5::server
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-devel
Red Hat:enterprise_linux:5::server
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif
Red Hat:enterprise_linux:6::client
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::client
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
Red Hat:enterprise_linux:6::computenode
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
Red Hat:enterprise_linux:6::server
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::server
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
openSUSE:Tumbleweed
 before 0.6.21-10.8
0.6.21-10.8

History

History
WhenChangedSources
2026-11-03affectedOSV
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 44 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open