Libexif
Vendor:
First CVE: May 2, 2005 · Active for 21 years
26
Total CVEs
More Total CVEs than 94% of tracked products
2.9
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 42% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libexif over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 2, 2005
21 years ago
Most Recent CVE
Apr 12, 2026
104 days ago
CVE Severity & Scoring
Libexif26 CVEs
38%
50%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local5 (19.2%)
Network8 (30.8%)
Unknown13 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (50.0%)
High0 (0.0%)
Unknown13 (50.0%)
User Interaction
None10 (38.5%)
Unknown13 (50.0%)
Required3 (11.5%)
Privileges Required
Low4 (15.4%)
High0 (0.0%)
None9 (34.6%)
Unknown13 (50.0%)
Top CVEs
Signals from CVEs in this product scope (26 CVEs).
26 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-2645HIGH Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or pos | May 14, 2007 | 9.3 | 39 | NO | YES |
CVE-2017-7544CRITICAL libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of | Sep 21, 2017 | 9.1 | 30 | NO | NO |
CVE-2026-40386HIGH In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-usin | Apr 12, 2026 | 7.1 | 29 | NO | NO |
CVE-2026-40385HIGH In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects | Apr 12, 2026 | 7.1 | 28 | NO | NO |
CVE-2020-13113HIGH An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions. | May 21, 2020 | 8.2 | 28 | NO | NO |
CVE-2026-32775HIGH libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an int | Mar 16, 2026 | 7.8 | 26 | NO | NO |
CVE-2020-0181HIGH In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional ex | Jun 11, 2020 | 7.5 | 26 | NO | NO |
CVE-2020-13114HIGH An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding | May 21, 2020 | 7.5 | 26 | NO | NO |
CVE-2012-2814HIGH Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or | Jul 13, 2012 | 7.5 | 26 | NO | NO |
CVE-2020-13112CRITICAL An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE- | May 21, 2020 | 9.1 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (26 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
3.8% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (26 CVEs).
Media Mentions
Signals from CVEs in this product scope (26 CVEs).
Top CNAs Publishing CVEs For Libexif
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 0.6.9 | 3 | 6.2 | 7.3% | 0 | 1 |
| 0.6.21 | 2 | 6.5 | 2.2% | 0 | 0 |
| 0.6.20 | 2 | 7.5 | 6.6% | 0 | 0 |
| 0.6.19 | 5 | 6.3 | 4.5% | 0 | 0 |
| 0.6.18 | 6 | 6.4 | 4.6% | 0 | 0 |
| 0.6.16 | 5 | 6.3 | 4.5% | 0 | 0 |
| 0.6.15 | 7 | 6.1 | 4.1% | 0 | 0 |
| 0.6.14 | 7 | 6.1 | 4.1% | 0 | 0 |
| 0.6.13 | 2 | 8.1 | 8.7% | 0 | 1 |
| 0.6.12 | 2 | 8.1 | 8.7% | 0 | 1 |
| 0.6.11 | 2 | 8.1 | 8.7% | 0 | 1 |
| 0.5.12 | 1 | 9.3 | 13.2% | 0 | 1 |
| 0.5 | 1 | 9.3 | 13.2% | 0 | 1 |