Exempi
Vendor:
First CVE: Mar 6, 2018 · Active for 8 years
13
Total CVEs
More Total CVEs than 92% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Exempi over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 6, 2018
8 years ago
Most Recent CVE
Aug 22, 2023
1,071 days ago
CVE Severity & Scoring
Exempi13 CVEs
85%
15%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local10 (76.9%)
Network3 (23.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (7.7%)
Unknown0 (0.0%)
Required12 (92.3%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None13 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-12648HIGH The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference. | Jun 22, 2018 | 7.5 | 24 | NO | NO |
CVE-2017-18234HIGH An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified | Mar 15, 2018 | 7.8 | 24 | NO | NO |
CVE-2020-18652MEDIUM Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file. | Aug 22, 2023 | 6.5 | 21 | NO | NO |
CVE-2020-18651MEDIUM Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of cra | Aug 22, 2023 | 6.5 | 21 | NO | NO |
CVE-2018-7731MEDIUM An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer deref | Mar 6, 2018 | 5.5 | 20 | NO | NO |
CVE-2018-7730MEDIUM An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, leading to a heap-based b | Mar 6, 2018 | 5.5 | 20 | NO | NO |
CVE-2017-18238MEDIUM An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp allows remote attackers to caus | Mar 15, 2018 | 5.5 | 19 | NO | NO |
CVE-2017-18236MEDIUM An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attackers to cause a denia | Mar 15, 2018 | 5.5 | 19 | NO | NO |
CVE-2017-18235MEDIUM An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote | Mar 15, 2018 | 5.5 | 19 | NO | NO |
CVE-2018-7729MEDIUM An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler::ParsePSFile() function in XMPFiles/source/FileHandlers/PostS | Mar 6, 2018 | 5.5 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Exempi
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.4.5 | 1 | 7.5 | 2.3% | 0 | 0 |