Back to Database
Status published
Critical
CVE-2020-13112
An issue was discovered in libexif before 0.6.22. Several buffer...
Vulnerability Description
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13112
Credits & Attribution
No credits recorded in the NVD database.
References
More from libexif project
View All →CVE-2021-27815
NULL Pointer Deference in the exif command line tool, when...
Medium
5.5
CVE-2020-13114
An issue was discovered in libexif before 0.6.22. An unrestricted...
High
7.5
CVE-2020-13113
An issue was discovered in libexif before 0.6.22. Use of...
High
8.2
CVE-2020-12767
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error....
Medium
5.5
CVE-2012-2841
Integer underflow in the exif_entry_get_value function in exif-entry.c in the...
High
7.5
Affected Vendor
libexif project
View all reports →Affected Software
libexif, debian linux, ubuntu linux, leap
Vulnerable Versions:
0, 8.0, 12.04, 14.04, 16.04, 18.04, 19.10, 20.04, 15.1
Timeline
Official Publish:
May 21st, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.