CVE-2012-2813

CVE-2012-2813 describes an out-of-bounds read vulnerability in the exif_convert_utf16_to_utf8 function within the libexif library, affecting versions prior to 0.6.21. This flaw allows remote attackers to trigger a denial of service or potentially extract sensitive information from process memory by supplying specially crafted EXIF tags in an image file. With a CVSS score of 6.4, this vulnerability is rated as medium severity, indicating a low attack complexity and requiring no authentication, with potential impacts on confidentiality and availability. There is no evidence of active exploitation, nor are there known public exploits or Metasploit modules available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.