Libexif

Vendor:

First CVE: May 2, 2005 · Active for 21 years

26
Total CVEs
More Total CVEs than 94% of tracked products
2.9
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 42% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Libexif over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 2, 2005
21 years ago
Most Recent CVE
Apr 12, 2026
104 days ago

CVE Severity & Scoring

Libexif26 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local5 (19.2%)
Network8 (30.8%)
Unknown13 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (50.0%)
High0 (0.0%)
Unknown13 (50.0%)
User Interaction
None10 (38.5%)
Unknown13 (50.0%)
Required3 (11.5%)
Privileges Required
Low4 (15.4%)
High0 (0.0%)
None9 (34.6%)
Unknown13 (50.0%)

Top CVEs

Signals from CVEs in this product scope (26 CVEs).

26 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or pos
May 14, 20079.339NOYES
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of
Sep 21, 20179.130NONO
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-usin
Apr 12, 20267.129NONO
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects
Apr 12, 20267.128NONO
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
May 21, 20208.228NONO
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an int
Mar 16, 20267.826NONO
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional ex
Jun 11, 20207.526NONO
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding
May 21, 20207.526NONO
Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or
Jul 13, 20127.526NONO
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-
May 21, 20209.125NONO

Exploit Exposure

Signals from CVEs in this product scope (26 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
3.8% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (26 CVEs).

Media Mentions

Signals from CVEs in this product scope (26 CVEs).

Top CNAs Publishing CVEs For Libexif

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
0.6.936.27.3%01
0.6.2126.52.2%00
0.6.2027.56.6%00
0.6.1956.34.5%00
0.6.1866.44.6%00
0.6.1656.34.5%00
0.6.1576.14.1%00
0.6.1476.14.1%00
0.6.1328.18.7%01
0.6.1228.18.7%01
0.6.1128.18.7%01
0.5.1219.313.2%01
0.519.313.2%01