Skip to content
Libexif Project vulnerabilities
Newest
-
libexif project libexif
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote...
CVE-2026-40386
Fix available
4.0 Medium
-
libexif project libexif
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could...
CVE-2026-40385
Fix available
4.0 Medium
-
libexif project libexif
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value...
CVE-2026-32775
Fix available
7.4 High
-
libexif project exif, fedoraproject fedora +1 more
NULL Pointer Deference in the "actions.c" library of libexif exif v0.6.22 allows attackers to...
CVE-2021-27815
Fix available
5.5 Medium
-
google android, canonical ubuntu linux, debian linux +2 more +4 more
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer...
CVE-2020-0198
Public exploitFix available
7.5 High
-
libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 more
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote...
CVE-2020-13113
Fix available
8.2 High
-
libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 more
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote...
CVE-2020-13112
Fix available
9.1 Critical
-
libexif project libexif, canonical ubuntu linux, opensuse leap +2 more
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF...
CVE-2020-13114
Fix available
7.5 High
-
google android, canonical ubuntu linux, debian linux +2 more +4 more
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a...
CVE-2020-0093
Fix available
5.0 Medium
-
libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 more
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
CVE-2020-12767
Fix available
5.5 Medium
-
google android, fedoraproject fedora, libexif project libexif +2 more
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an...
CVE-2020-0181
Public exploitFix available
7.5 High
-
flexera software llc libexif
An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif...
CVE-2018-20030
Fix available
7.5 High
-
[unknown] libexif, canonical ubuntu linux, debian linux +2 more
A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of...
CVE-2016-6328
Public exploitFix available
6.1 Medium
-
libexif project libexif
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in...
CVE-2017-7544
Fix available
9.1 Critical
-
libexif project libexif
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing...
CVE-2012-2841
Fix available
7.5 High
-
libexif project libexif
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag...
CVE-2012-2840
Fix available
7.5 High
-
libexif project libexif
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag...
CVE-2012-2837
Fix available
5.0 Medium
-
libexif project libexif
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif)...
CVE-2012-2836
Fix available
6.4 Medium
-
libexif project libexif
Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing...
CVE-2012-2814
Fix available
7.5 High
-
libexif project libexif
The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka...
CVE-2012-2813
Fix available
6.4 Medium
-
libexif project libexif
The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif)...
CVE-2012-2812
Fix available
6.4 Medium
-
libexif project libexif
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif...
CVE-2009-3895
Fix available
6.8 Medium
-
libexif project libexif
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service ...
CVE-2007-6351
Fix available
4.3 Medium