Every CVE Search/ Get API key

CVE-2012-2840

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag...

7.5 HighFix available

CVE-2012-2840 is a high vulnerability (CVSS 7.5) in Libexif Project Libexif, published July 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.06%, the 92nd percentile. Fixed in libexif 0.6.21-r0.

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Exploit likelihood

5.06%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
CVE-2012-2840
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
CVE-2012-2840
Updated
2026-11-02
EUVDEUVD-2012-2820 No score

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
EUVD-2012-2820
Updated
2026-11-03
GitHub AdvisoriesGHSA-7r47-9m3f-8mp5 No score

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag...

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
GHSA-7r47-9m3f-8mp5
Updated
2026-11-02
OSVBELL-CVE-2012-2840 7.5

CVE-2012-2840 does not affect BellSoft software

Record
BELL-CVE-2012-2840
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
OSVALPINE-CVE-2012-2840 No score

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
ALPINE-CVE-2012-2840
Updated
2026-11-03
OSV No score

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
CVE-2012-2840
Updated
2026-11-02
OSVDEBIAN-CVE-2012-2840 No score

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Record
DEBIAN-CVE-2012-2840
Updated
2026-11-02
OSVopenSUSE-SU-2024:10510-1 No score

libexif-devel-0.6.21-10.8 on GA media

These are all security issues fixed in the libexif-devel-0.6.21-10.8 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10510-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libexif
Alpine:v3.10
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.11
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.12
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.13
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.14
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.15
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.16
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.17
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.18
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.19
 before 0.6.21-r0
0.6.21-r0
Show 32 moreShow less
Affected packages
PackageAffectedFixed
libexif
Alpine:v3.20
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.21
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.22
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.23
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.24
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.8
 before 0.6.21-r0
0.6.21-r0
libexif
Alpine:v3.9
 before 0.6.21-r0
0.6.21-r0
libexif
Debian:12
 before 0.6.20-3
0.6.20-3
libexif
Debian:13
 before 0.6.20-3
0.6.20-3
libexif
Debian:14
 before 0.6.20-3
0.6.20-3
libexif
Debian:6.0
 before 0.6.19-1+squeeze1, plus listed versions
0.6.19-1
0.6.19-1+squeeze1
libexif
Red Hat:enterprise_linux:5::client
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif
Red Hat:enterprise_linux:5::client_workstation
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif
Red Hat:enterprise_linux:5::server
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif-devel
Red Hat:enterprise_linux:5::server
 before 0:0.6.21-1.el5_8
0:0.6.21-1.el5_8
libexif
Red Hat:enterprise_linux:6::client
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::client
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
Red Hat:enterprise_linux:6::computenode
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
Red Hat:enterprise_linux:6::server
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::server
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.6.21-5.el6_3
0:0.6.21-5.el6_3
libexif
openSUSE:Tumbleweed
 before 0.6.21-10.8
0.6.21-10.8

History

History
WhenChangedSources
2026-11-03affectedOSV
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 43 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open