Known Vulnerabilities for products from Libexif Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Libexif Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40386 json | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by att... | Not Provided | 2026-04-12 | 2026-04-14 |
| CVE-2026-40385 json | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to... | Not Provided | 2026-04-12 | 2026-04-14 |
| CVE-2026-32775 json | libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, ... | Not Provided | 2026-03-16 | 2026-04-21 |
| CVE-2021-27815 json | NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier ... | 5.5 - MEDIUM | 2021-04-14 | 2023-11-07 |
| CVE-2020-13114 json | An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to co... | 7.5 - HIGH | 2020-05-21 | 2022-04-27 |
| CVE-2020-13113 json | An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashe... | 8.2 - HIGH | 2020-05-21 | 2022-04-26 |
| CVE-2020-13112 json | An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to informat... | 9.1 - CRITICAL | 2020-05-21 | 2023-01-27 |
| CVE-2020-12767 json | exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error. | 5.5 - MEDIUM | 2020-05-09 | 2023-01-27 |
| CVE-2020-0198 json | In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to... | 7.5 - HIGH | 2020-06-11 | 2023-11-07 |
| CVE-2020-0181 json | In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could... | 7.5 - HIGH | 2020-06-11 | 2023-11-07 |
| CVE-2020-0093 json | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could... | 5 - MEDIUM | 2020-05-14 | 2022-10-14 |
| CVE-2018-20030 json | An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited ... | 7.5 - HIGH | 2019-02-20 | 2020-06-11 |
| CVE-2017-7544 json | libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexi... | 9.1 - CRITICAL | 2017-09-21 | 2020-06-11 |
| CVE-2016-6328 json | A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause... | 8.1 - HIGH | 2018-10-31 | 2023-02-12 |
| CVE-2012-2841 json | Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 m... | 7.5 - HIGH | 2012-07-13 | 2023-11-07 |
| CVE-2012-2840 json | Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) bef... | 7.5 - HIGH | 2012-07-13 | 2023-11-07 |
| CVE-2012-2837 json | The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) bef... | 5 - MEDIUM | 2012-07-13 | 2023-11-07 |
| CVE-2012-2836 json | The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote att... | 6.4 - MEDIUM | 2012-07-13 | 2023-11-07 |
| CVE-2012-2814 json | Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 ... | 7.5 - HIGH | 2012-07-13 | 2023-11-07 |
| CVE-2012-2813 json | The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows re... | 6.4 - MEDIUM | 2012-07-13 | 2023-11-07 |
Known software with vulnerabilities from Libexif Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Libexif Project | Libexif | - |