CVE-2012-2845

FAUCET Score

CVE-2012-2845 describes an integer overflow in the jpeg_data_load_data function within libjpeg, specifically affecting exif 0.6.20. This vulnerability allows remote attackers to trigger a denial of service (buffer over-read and application crash) or potentially expose sensitive information through a specially crafted JPEG file. With a CVSS score of 6.4, it is considered of medium severity, requiring no authentication and having low attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		0.6.20CPE matchmatch criteria	cpe:2.3:a:curtis_galloway:exif:0.6.20:::::::*

CVSS Data

CVSS version used by this source: 2.0

6.4MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

4.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

3.56%

Probability of exploitation in next 30 days

EPSS Percentile

88.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0356 is in the 84th percentile among its peer group of 23,703 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2012-2845Low

exif: Integer overflow, leading to DoS (buffer over-read and application crash) in jpeg_data_load_data routine

Jul 12, 2012

References

secunia.com / advisories/49988

sourceforge.net / mailarchive/message.php

mandriva.com / security/advisories

securityfocus.com / bid/54437