rpm package
almalinux/libexif-devel
pkg:rpm/almalinux/libexif-devel
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-40386 | Med | 4.0 | < 0.6.22-6.el8_10 | 0.6.22-6.el8_10 | Apr 12, 2026 | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs. | |
| CVE-2026-40385 | Med | 4.0 | < 0.6.22-6.el8_10 | 0.6.22-6.el8_10 | Apr 12, 2026 | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems. | |
| CVE-2020-0452 | — | < 0.6.22-5.el8_3 | 0.6.22-5.el8_3 | Nov 10, 2020 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interacti |
- affected < 0.6.22-6.el8_10fixed 0.6.22-6.el8_10
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
- affected < 0.6.22-6.el8_10fixed 0.6.22-6.el8_10
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
- CVE-2020-0452Nov 10, 2020affected < 0.6.22-5.el8_3fixed 0.6.22-5.el8_3
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interacti