Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2020-0093

libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c

In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132

CVSS 3.1 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Android and 3 more
CVE-2018-20030

libexif: Input validation issue resulting in a denial of service

An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Libexif Project
Products
Libexif
CVE-2016-6328

libexif: Integer overflow in parsing MNOTE entry data of the input file

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).

CVSS 3.1 · 8.1 High EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Libexif Project
Products
Ubuntu Linux Debian Linux Libexif