Approved changes feed: RSS · Atom
cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Libexif Project (6776eb17-15d9-5965-8817-534a7c0c4abc) |
|---|---|
| Product | Libexif (8ec8369b-6760-5fe1-af8c-b3b90310e8c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/inventloop/libexif |
purl2cpe | 2026-06-01 10:17:43.684466 |
pkg:deb/debian/libexif |
purl2cpe | 2026-06-01 10:17:43.684469 |
pkg:deb/ubuntu/libexif |
purl2cpe | 2026-06-01 10:17:43.684472 |
pkg:github/libexif/libexif |
purl2cpe | 2026-06-01 10:17:43.684475 |
pkg:gitlab/redhat/libexif |
purl2cpe | 2026-06-01 10:17:43.684477 |
pkg:rpm/centos/libexif |
purl2cpe | 2026-06-01 10:17:43.684480 |
pkg:rpm/fedora/libexif |
purl2cpe | 2026-06-01 10:17:43.684483 |
pkg:rpm/opensuse/libexif |
purl2cpe | 2026-06-01 10:17:43.684486 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40386 |
vulnerable | 2026-06-08 08:01:20.487271 |
Details available
MEDIUM (4)
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
Published: 2026-04-12T18:19:08.684Z
Updated: 2026-04-14T16:33:07.044Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40385 |
vulnerable | 2026-06-08 08:01:20.486787 |
Details available
MEDIUM (4)
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
Published: 2026-04-12T18:16:30.420Z
Updated: 2026-04-14T16:33:12.567Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32775 |
vulnerable | 2026-06-08 07:57:18.150582 |
Details available
HIGH (7.4)
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
Published: 2026-03-16T06:31:36.015Z
Updated: 2026-04-12T18:23:28.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13114 |
vulnerable | 2026-06-08 05:18:00.183750 |
Details available
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
Published: 2020-05-21T15:50:42.000Z
Updated: 2024-08-04T12:11:18.798Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13113 |
vulnerable | 2026-06-08 05:18:00.182923 |
Details available
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
Published: 2020-05-21T16:03:03.000Z
Updated: 2024-08-04T12:11:19.105Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13112 |
vulnerable | 2026-06-08 05:18:00.181975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-0198 |
vulnerable | 2026-06-08 05:14:27.100062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-0181 |
vulnerable | 2026-06-08 05:14:27.081380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-0093 |
vulnerable | 2026-06-08 05:14:26.873891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7544 |
vulnerable | 2026-06-08 05:09:56.487977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6328 |
vulnerable | 2026-06-08 05:07:59.624763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2840 |
vulnerable | 2026-06-08 05:02:06.573538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2837 |
vulnerable | 2026-06-08 05:02:06.573076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2836 |
vulnerable | 2026-06-08 05:02:06.572615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2813 |
vulnerable | 2026-06-08 05:02:06.545563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2812 |
vulnerable | 2026-06-08 05:02:06.541787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6351 |
vulnerable | 2026-06-08 04:50:08.603724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.