What’s Vulnerable › Vulnerabilities

CVE-2007-6351

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-12-20 · updated 2026-06-16

Description

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.

Affected products

• libexif project libexif: through 0.6.16; 0.6.14, 0.6.15

References

• http://bugs.gentoo.org/show_bug.cgi?id=202350
• http://osvdb.org/42652
• http://secunia.com/advisories/28076
• http://secunia.com/advisories/28127
• http://secunia.com/advisories/28195
• http://secunia.com/advisories/28266
• http://secunia.com/advisories/28346
• http://secunia.com/advisories/28400
• http://secunia.com/advisories/28636
• http://secunia.com/advisories/28776
• http://secunia.com/advisories/32274
• http://security.gentoo.org/glsa/glsa-200712-15.xml

Get alerted when CVE-2007-6351 or the next vulnerability affects your stack