CVE-2026-40386

<= 0.6.25

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attacker

4.0MEDIUM

CVE-2026-40385

<= 0.6.25

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to caus

4.0MEDIUM

CVE-2026-32775

<= 0.6.25

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the p

7.4HIGH

CVE-2020-0198

< 0.6.22_p20201105

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remo

7.5HIGH

CVE-2020-0181

< 0.6.22_p20201105

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead

7.5HIGH

CVE-2020-13113

< 0.6.22

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and

8.2HIGH

CVE-2020-13114

< 0.6.22

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consump

7.5HIGH

CVE-2020-13112

< 0.6.22

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information d

9.1CRITICAL

CVE-2020-0093

< 0.6.22

In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead

5.0MEDIUM

CVE-2020-12767

all versions

exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.

5.5MEDIUM

CVE-2018-20030

all versions

An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to ex

7.5HIGH

CVE-2016-6328

< 0.6.22

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Deni

8.1HIGH

CVE-2017-7544

<= 0.6.21

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exi

9.1CRITICAL

CVE-2012-2841

all versions

Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might

CVE-2012-2840

<= 0.6.20

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0

CVE-2012-2837

<= 0.6.20

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0

CVE-2012-2836

<= 0.6.20

The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attacker

CVE-2012-2814

all versions

Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allow

CVE-2012-2813

<= 0.6.20

The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote

CVE-2012-2812

<= 0.6.20

The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attack

CVE-2009-3895

all versions

Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 al

CVE-2007-6352

<= 0.6.16

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with craf

CVE-2007-6351

<= 0.6.16

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file

CVE-2006-4168

all versions

Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers

CVE-2007-2645

all versions

Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote att

CVE-2005-0664

all versions

Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote