Alpine/libexif: critical 9.1
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
Action: Upgrade libexif to 0.6.22-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.22-r0 | - |
Fixed versions
| 0.6.22-r0 |
Sources
- osv: ALPINE-CVE-2020-13112#Alpine:v3.11/libexif
- https://security.alpinelinux.org/vuln/CVE-2020-13112
published · modified · JSON