high8.2
CVE-2020-13113
An issue was discovered in libexif before 0.6.22.
Impact
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libexif Project | Libexif | before 0.6.22 |
| Debian | Debian Linux | Version 8.0 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04, 18.04, 19.10, 20.04 |
| Opensuse | Leap | Version 15.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
- https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f
- https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html
- https://security.gentoo.org/glsa/202007-05
- https://usn.ubuntu.com/4396-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
- https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f
- https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html
- https://security.gentoo.org/glsa/202007-05
- https://usn.ubuntu.com/4396-1/