CVE-2017-7544

CVE-2017-7544 is a critical out-of-bounds heap read vulnerability in libexif versions through 0.6.21, specifically within the exif_data_save_data_entry function. This flaw, caused by improper length computation for ExifMnote entries, can lead to denial-of-service or potential information disclosure. With a CVSS score of 9.1 (CRITICAL), it is easily exploitable over a network with low attack complexity and no user interaction required, posing a high risk to confidentiality and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.