CVE-2020-13112

Description

References

• lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html · Mailing List
• libexif/libexif commit 435e21f · Patch
• lists.debian.org/debian-lts-announce/2020/05/msg00025.html · Mailing List
• security.gentoo.org/glsa/202007-05 · Third Party Advisory
• usn.ubuntu.com/4396-1 · Third Party Advisory

libexif의 다른 취약점

• CVE-2026-40386높음 7.1In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash…
• CVE-2026-40385높음 7.1In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes …
• CVE-2026-32775높음 7.8libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-b…
• CVE-2020-0198높음 7.5In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial …
• CVE-2020-0181높음 7.5In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote…