Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2006-4168

libexif integer overflow

Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.3% KEV · Not listed
Vendors
Libexif Redhat
Products
Libexif Enterprise Linux
CVE-2007-2645

Interger overflow in libexif

Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.

CVSS 2.0 · 9.3 Critical EPSS 13.1% KEV · Not listed
Vendors
Libexif
Products
Libexif
CVE-2007-6352

libexif integer overflow

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Libexif Redhat
Products
Libexif Enterprise Linux
CVE-2026-32775

libexif: libexif: Buffer overwrite via integer underflow in MakerNotes decoding

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Libexif Libexif Project
Products
Libexif Libexif
CVE-2005-0664

security flaw

Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.

CVSS 2.0 · 2.6 Low EPSS 4.5% KEV · Not listed
Vendors
Libexif Redhat
Products
Libexif Enterprise Linux