Approved changes feed: RSS · Atom

cpe:2.3:a:curtis_galloway:exif:0.6.20:*:*:*:*:*:*:*

part: a version: 0.6.20 update: *

VendorCurtis Galloway (aba83203-d81d-50f3-be86-654ac9599912)
ProductExif (a33d4532-07fe-51f8-a03e-69037fbfc365)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/exif purl2cpe 2026-06-01 10:17:55.773274
pkg:deb/ubuntu/exif purl2cpe 2026-06-01 10:17:55.773276
pkg:github/libexif/libexif purl2cpe 2026-06-01 10:17:55.773277
pkg:rpm/fedora/exif purl2cpe 2026-06-01 10:17:55.773278
pkg:rpm/opensuse/exif purl2cpe 2026-06-01 10:17:55.773280
pkg:sourceforge/libexif purl2cpe 2026-06-01 10:17:55.773281

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2845 vulnerable 2026-06-08 05:02:06.666431 Details available
Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain potentially sensitive information via a crafted JPEG file.
Published: 2012-07-13T10:00:00.000Z
Updated: 2024-08-06T19:50:03.675Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.