Red Hat Security Advisory 2020-5402-01 - The libexif packages provide a library for extracting extra information from image files. Issues addressed include integer overflow and out of bounds write vulnerabilities.
9436fc9f25b8828a05004793b5433b40463416be056db6fbd7d4c3fdf9895e52
Red Hat Security Advisory 2020-5394-01 - The libexif packages provide a library for extracting extra information from image files. Issues addressed include integer overflow and out of bounds write vulnerabilities.
1b283daa17d2d21b64d16293d4730c416f04650cc90f603d6896976df8586f78
Red Hat Security Advisory 2020-5393-01 - The libexif packages provide a library for extracting extra information from image files. Issues addressed include integer overflow and out of bounds write vulnerabilities.
593bdcd353df763427f613426abf2818b6e8eaa92585181a468377883359900e
Red Hat Security Advisory 2020-5395-01 - The libexif packages provide a library for extracting extra information from image files. Issues addressed include integer overflow and out of bounds write vulnerabilities.
406db4d84954b02d3a78ba408fe71c17d0ae4b25eea0fc7d07261e5bb36e93a9
Red Hat Security Advisory 2020-5396-01 - The libexif packages provide a library for extracting extra information from image files. Issues addressed include integer overflow and out of bounds write vulnerabilities.
b64af2586ebba06f79777d72c4bb0e66989797ca430e57841ec89075a3adb4da
Debian Linux Security Advisory 4786-1 - It was discovered that a boundary check in libexif, a library to parse EXIF files, could be optimised away by the compiler, resulting in a potential buffer overflow.
4746926a84776a97bc99df4ffa0bb2f0445a5ae0670bb2a26dd98c54a37bddbd
Gentoo Linux Security Advisory 202011-19 - Multiple vulnerabilities have been found in libexif, the worst of which could result in the arbitrary execution of code. Versions less than 0.6.22_p20201105 are affected.
938499afbe532d0782213795b0b110ef947cfbc3c7b099c19a15220c3a2d3428
Ubuntu Security Notice 4624-1 - It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause unexpected behaviours, or execute arbitrary code.
bbdedad92c5f49abf4ec712372a7579c609942a31ff4253159b2e40d800c11b9