CVE-2012-2841
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing...
CVE-2012-2841 is a high vulnerability (CVSS 7.5) in Libexif Project Libexif, published July 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.75%, the 93rd percentile. Fixed in libexif 0.6.21-r0.
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
CVE-2012-2841- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
CVE-2012-2841- Updated
- 2026-11-02
EUVDEUVD-2012-2821 No score
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
EUVD-2012-2821- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gf6f-3mxg-9758 No score
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing...
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
GHSA-gf6f-3mxg-9758- Updated
- 2026-11-02
OSVBELL-CVE-2012-2841
CVE-2012-2841 does not affect BellSoft software
- Record
BELL-CVE-2012-2841- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSVALPINE-CVE-2012-2841 No score
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
ALPINE-CVE-2012-2841- Updated
- 2026-11-02
OSV No score
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
CVE-2012-2841- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2841 No score
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.
- Record
DEBIAN-CVE-2012-2841- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10510-1 No score
libexif-devel-0.6.21-10.8 on GA media
These are all security issues fixed in the libexif-devel-0.6.21-10.8 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10510-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libexifAlpine:v3.10 |
before 0.6.21-r0 | 0.6.21-r0 |
libexifAlpine:v3.11 |
before 0.6.21-r0 | 0.6.21-r0 |
libexifAlpine:v3.12 |
before 0.6.21-r0 | 0.6.21-r0 |
libexifAlpine:v3.8 |
before 0.6.21-r0 | 0.6.21-r0 |
libexifAlpine:v3.9 |
before 0.6.21-r0 | 0.6.21-r0 |
libexifDebian:12 |
before 0.6.20-3 | 0.6.20-3 |
libexifDebian:13 |
before 0.6.20-3 | 0.6.20-3 |
libexifDebian:14 |
before 0.6.20-3 | 0.6.20-3 |
libexifDebian:6.0 |
before 0.6.19-1+squeeze1, plus listed versions 0.6.19-1 |
0.6.19-1+squeeze1 |
libexifRed Hat:enterprise_linux:5::client |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
Show 20 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libexif-debuginfoRed Hat:enterprise_linux:5::client |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexifRed Hat:enterprise_linux:5::client_workstation |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexif-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexif-develRed Hat:enterprise_linux:5::client_workstation |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexifRed Hat:enterprise_linux:5::server |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexif-debuginfoRed Hat:enterprise_linux:5::server |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexif-develRed Hat:enterprise_linux:5::server |
before 0:0.6.21-1.el5_8 | 0:0.6.21-1.el5_8 |
libexifRed Hat:enterprise_linux:6::client |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-debuginfoRed Hat:enterprise_linux:6::client |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-develRed Hat:enterprise_linux:6::client |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexifRed Hat:enterprise_linux:6::computenode |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-develRed Hat:enterprise_linux:6::computenode |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexifRed Hat:enterprise_linux:6::server |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-develRed Hat:enterprise_linux:6::server |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexifRed Hat:enterprise_linux:6::workstation |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexif-develRed Hat:enterprise_linux:6::workstation |
before 0:0.6.21-5.el6_3 | 0:0.6.21-5.el6_3 |
libexifopenSUSE:Tumbleweed |
before 0.6.21-10.8 | 0.6.21-10.8 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/54437
debian.org/security/2012/dsa-2559
lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html
sourceforge.net/mailarchive/message.php?msg_id=29534027
secunia.com/advisories/49988
rhn.redhat.com/errata/RHSA-2012-1255.html
Show 44 moreShow less
ubuntu.com/usn/USN-1513-1
nvd.nist.gov/vuln/detail/CVE-2012-2841
github.com/advisories/GHSA-gf6f-3mxg-9758
security.alpinelinux.org/vuln/CVE-2012-2841
docs.bell-sw.com/security/cves/CVE-2012-2841
security-tracker.debian.org/tracker/CVE-2012-2841
access.redhat.com/errata/RHSA-2012:1255
bugzilla.redhat.com/show_bug.cgi?id=839182
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1255.json
cve.org/CVERecord?id=CVE-2012-2812
suse.com/security/cve/CVE-2012-2812