Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2020-13113

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.

VectorNETWORK

PublishedMay 21, 2020, 17:15

Published Bycve@mitre.org

Base Score

Score8.2

Affected Versions

No affected versions found.

References

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f
https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html
https://security.gentoo.org/glsa/202007-05
https://usn.ubuntu.com/4396-1/

Weakness Type

CWE-908

CVSS Metrics

Base Score

8.2

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK