Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2020-13112

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.

VectorNETWORK

PublishedMay 21, 2020, 16:15

Published Bycve@mitre.org

Base Score

Score9.1

Affected Versions

No affected versions found.

References

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
https://github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1
https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html
https://security.gentoo.org/glsa/202007-05
https://usn.ubuntu.com/4396-1/

Weakness Type

CWE-125

CVSS Metrics

Base Score

9.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK