What’s Vulnerable › Vulnerabilities
CVE-2017-7544
- Severity: critical (CVSS 9.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-09-21 · updated 2026-06-17
- Weakness: CWE-125
Description
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.
Affected products
- libexif project libexif: through 0.6.21
References
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html
- https://sourceforge.net/p/libexif/bugs/130/
- https://usn.ubuntu.com/4277-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html
- https://sourceforge.net/p/libexif/bugs/130/
- https://usn.ubuntu.com/4277-1/
Get alerted when CVE-2017-7544 or the next vulnerability affects your stack