İçeriğe atla
Noroxi

libexif project kayıtları

libexif project üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2017-7544
    37İzleyin

    libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c c

    KritikCVSS 9,1İstismar yokEPSS %3

    libexif project · libexif21 Eyl 2017

  • CVE-2020-13112
    37İzleyin

    An issue was discovered in libexif before 0.6.22.

    KritikCVSS 9,1İstismar yokEPSS %3

    libexif project · libexif21 May 2020

  • CVE-2020-13113
    33İzleyin

    An issue was discovered in libexif before 0.6.22.

    YüksekCVSS 8,2İstismar yokEPSS %2

    libexif project · libexif21 May 2020

  • CVE-2016-6328
    33İzleyin

    A vulnerability was found in libexif.

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    libexif project · libexif31 Eki 2018

  • CVE-2012-2814
    32İzleyin

    Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote a

    YüksekCVSS 7,5İstismar yokEPSS %8

    libexif project · libexif13 Tem 2012

  • CVE-2012-2841
    32İzleyin

    Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remo

    YüksekCVSS 7,5İstismar yokEPSS %6

    libexif project · libexif13 Tem 2012

  • CVE-2012-2840
    32İzleyin

    Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allo

    YüksekCVSS 7,5İstismar yokEPSS %5

    libexif project · libexif13 Tem 2012

  • CVE-2020-0198
    31İzleyin

    In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow.

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    google · android11 Haz 2020

  • CVE-2018-20030
    31İzleyin

    An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust avai

    YüksekCVSS 7,5İstismar yokEPSS %4

    libexif project · libexif20 Şub 2019

  • CVE-2020-0181
    31İzleyin

    In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    google · android11 Haz 2020

  • CVE-2020-13114
    31İzleyin

    An issue was discovered in libexif before 0.6.22.

    YüksekCVSS 7,5İstismar yokEPSS %2

    libexif project · libexif21 May 2020

  • CVE-2026-32775
    31İzleyin

    libexif through 0.6.25 has a flaw in decoding MakerNotes.

    YüksekCVSS 7,8İstismar yokEPSS %0

    libexif project · libexif16 Mar 2026

  • CVE-2009-3895
    29İzleyin

    Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remot

    OrtaCVSS 6,8İstismar yokEPSS %5

    libexif project · libexif20 Kas 2009

  • CVE-2026-40386
    28İzleyin

    In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash

    YüksekCVSS 7,1İstismar yokEPSS %0

    libexif project · libexif12 Nis 2026

  • CVE-2026-40385
    28İzleyin

    In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes

    YüksekCVSS 7,1İstismar yokEPSS %0

    libexif project · libexif12 Nis 2026

  • CVE-2012-2836
    27İzleyin

    The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause

    OrtaCVSS 6,4İstismar yokEPSS %6

    libexif project · libexif13 Tem 2012

  • CVE-2012-2812
    26İzleyin

    The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cau

    OrtaCVSS 6,4İstismar yokEPSS %4

    libexif project · libexif13 Tem 2012

  • CVE-2012-2813
    26İzleyin

    The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers

    OrtaCVSS 6,4İstismar yokEPSS %4

    libexif project · libexif13 Tem 2012

  • CVE-2021-27815
    22İzleyin

    NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attacker

    OrtaCVSS 5,5İstismar yokEPSS %1

    libexif project · exif14 Nis 2021

  • CVE-2020-12767
    22İzleyin

    exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.

    OrtaCVSS 5,5İstismar yokEPSS %1

    libexif project · libexif9 May 2020

  • CVE-2012-2837
    21İzleyin

    The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allo

    OrtaCVSS 5,0İstismar yokEPSS %4

    libexif project · libexif13 Tem 2012

  • CVE-2020-0093
    20İzleyin

    In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check.

    OrtaCVSS 5,0İstismar yokEPSS %0

    google · android14 May 2020

  • CVE-2007-6351
    18İzleyin

    libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with craft

    OrtaCVSS 4,3İstismar yokEPSS %2

    libexif project · libexif19 Ara 2007