rpm package
suse/libexif&distro=HPE Helion OpenStack 8
pkg:rpm/suse/libexif&distro=HPE%20Helion%20OpenStack%208
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-0452 | — | < 0.6.22-8.13.1 | 0.6.22-8.13.1 | Nov 10, 2020 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interacti | ||
| CVE-2020-0198 | — | < 0.6.22-8.13.1 | 0.6.22-8.13.1 | Jun 11, 2020 | In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10A | ||
| CVE-2020-0181 | — | < 0.6.22-8.13.1 | 0.6.22-8.13.1 | Jun 11, 2020 | In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: | ||
| CVE-2020-13113 | — | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | May 21, 2020 | An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions. | ||
| CVE-2020-13112 | — | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | May 21, 2020 | An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093. | ||
| CVE-2020-13114 | — | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | May 21, 2020 | An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data. | ||
| CVE-2020-0093 | — | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | May 14, 2020 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: | ||
| CVE-2020-12767 | — | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | May 9, 2020 | exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error. | ||
| CVE-2019-9278 | — | < 0.6.21-8.6.1 | 0.6.21-8.6.1 | Sep 27, 2019 | In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: A | ||
| CVE-2018-20030 | — | < 0.6.21-8.6.1 | 0.6.21-8.6.1 | Feb 20, 2019 | An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources. | ||
| CVE-2016-6328 | — | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | Oct 31, 2018 | A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data). | ||
| CVE-2017-7544 | Cri | 9.1 | < 0.6.22-8.9.1 | 0.6.22-8.9.1 | Sep 21, 2017 | libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information d |
- CVE-2020-0452Nov 10, 2020affected < 0.6.22-8.13.1fixed 0.6.22-8.13.1
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interacti
- CVE-2020-0198Jun 11, 2020affected < 0.6.22-8.13.1fixed 0.6.22-8.13.1
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10A
- CVE-2020-0181Jun 11, 2020affected < 0.6.22-8.13.1fixed 0.6.22-8.13.1
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
- CVE-2020-13113May 21, 2020affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
- CVE-2020-13112May 21, 2020affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
- CVE-2020-13114May 21, 2020affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
- CVE-2020-0093May 14, 2020affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:
- CVE-2020-12767May 9, 2020affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
- CVE-2019-9278Sep 27, 2019affected < 0.6.21-8.6.1fixed 0.6.21-8.6.1
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: A
- CVE-2018-20030Feb 20, 2019affected < 0.6.21-8.6.1fixed 0.6.21-8.6.1
An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.
- CVE-2016-6328Oct 31, 2018affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).
- affected < 0.6.22-8.9.1fixed 0.6.22-8.9.1
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information d