CVE-2012-2836

CVE-2012-2836 describes an out-of-bounds read vulnerability in the exif_data_load_data function of the EXIF Tag Parsing Library (libexif) versions prior to 0.6.21. This flaw allows remote attackers to trigger a denial of service or potentially extract sensitive information from process memory by providing specially crafted EXIF tags within an image file. The vulnerability has a CVSS score of 6.4, indicating a medium severity, and is easily exploitable over the network with low attack complexity, potentially leading to partial confidentiality and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.