{"id":"CVE-2020-18652","aliases":["ALSA-2024:3066","DEBIAN-CVE-2020-18652","DLA-3585-1","EUVD-2020-10576","GHSA-fm7g-gm7p-w792","OESA-2023-1690","RHSA-2024:3066","RLSA-2024:3066","SUSE-SU-2023:3518-1","UBUNTU-CVE-2020-18652"],"status":"published","title":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote...","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01003,"percentile":0.63188,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-08-22T00:00:00Z","modified":"2026-10-29T11:02:20Z","fixes":[{"ecosystem":"Debian:12","package":"exempi","fixed_in":["2.5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exempi","fixed_in":["2.5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exempi","fixed_in":["2.5.1-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"exempi","fixed_in":["2.4.5-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"exempi","fixed_in":["2.4.5-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"exempi","fixed_in":["2.4.5-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"exempi","fixed_in":["2.4.5-150000.3.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"exempi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2+deb10u1"}]}],"versions":["2.5.0-2"],"bundled":24},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-5.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exempi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exempi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exempi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exempi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exempi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.2-2","2.2.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exempi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.3-1ubuntu1","2.4.5-2","2.4.5-2ubuntu0.1"]}],"products":[{"vendor":"exempi_project","product":"exempi"}],"references":[{"url":"https://gitlab.freedesktop.org/libopenraw/exempi/issues/12","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","article"]},{"url":"https://gitlab.freedesktop.org/libopenraw/exempi/commit/acee2894ceb91616543927c2a6e45050c60f98f7","tags":["x_transferred","Patch","fix","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-18652","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fm7g-gm7p-w792"},{"url":"https://access.redhat.com/errata/RHSA-2024:3066","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-18651","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-18652","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235669","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235673","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3066.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-18652","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-18651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40732","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235673","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3066.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-18651","tags":["advisory"]},{"url":"https://gitlab.freedesktop.org/libopenraw/exempi/commit/fdd4765a699f9700850098b43b9798b933acb32f","tags":["article"]},{"url":"https://gitlab.freedesktop.org/libopenraw/exempi/issues/13","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-18652","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3066","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233518-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214488","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-18652","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-18652","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-18652","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-04T16:41:19.596Z","updated_at":"2026-11-02T14:35:59.434367Z"}],"euvd":[{"id":"EUVD-2020-10576","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-04T16:41:19Z","updated_at":"2026-11-03T00:27:51.858084Z"}],"ghsa":[{"id":"GHSA-fm7g-gm7p-w792","title":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote...","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T21:30:24Z","modified":"2024-04-04T07:05:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:56:48.229282Z"}],"nvd":[{"id":"CVE-2020-18652","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T19:15:55.423Z","modified":"2026-06-17T02:59:22.447Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"CVE-2020-18652","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T19:15:55.423Z","modified":"2026-10-20T13:28:34.568789328Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-18652","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T19:15:55.423Z","modified":"2026-10-26T12:02:28.99193637Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"OESA-2023-1690","title":"exempi security update","description":"Exempi is an implementation of XMP. Version 2.x is based on Adobe XMP SDK and released under a BSD-style license like Adobe\u0026apos;s.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.(CVE-2020-18651)\r\n\r\nBuffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.(CVE-2020-18652)\r\n\r\nXMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.(CVE-2021-40732)","status":"published","published":"2023-09-28T11:06:08Z","modified":"2026-08-18T01:16:54.725504997Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2024:3066","title":"Red Hat Security Advisory: exempi security update","status":"published","published":"2024-09-16T17:02:56Z","modified":"2026-06-26T12:22:31.98693219Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2020-18652","description":"Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.","status":"published","published":"2023-08-22T19:15:00Z","modified":"2026-04-22T12:33:25.310279Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2024:3066","title":"Moderate: exempi security update","description":"Exempi provides a library for easy parsing of XMP metadata.\n\nSecurity Fix(es):\n\n* exempi: denial of service via opening of crafted audio file with ID3V2 frame (CVE-2020-18651)\n* exempi: denial of service via opening of crafted webp file (CVE-2020-18652)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.851126579Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"DLA-3585-1","title":"exempi - security update","status":"published","published":"2023-09-25T00:00:00Z","modified":"2026-03-09T02:08:35.890396Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"RLSA-2024:3066","title":"Moderate: exempi security update","description":"Exempi provides a library for easy parsing of XMP metadata.\n\nSecurity Fix(es):\n\n* exempi: denial of service via opening of crafted audio file with ID3V2 frame (CVE-2020-18651)\n\n* exempi: denial of service via opening of crafted webp file (CVE-2020-18652)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:30.118978Z","modified":"2026-02-04T09:45:06.294921Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:3518-1","title":"Security update for exempi","description":"This update for exempi fixes the following issues:\n\n- CVE-2020-18652: Fixed buffer overflow vulnerability in WEBP_Support.cpp (bsc#1214488).\n","status":"published","published":"2023-09-05T06:23:00Z","modified":"2026-02-04T03:45:32.034735Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}