HomeDefectsLIN9-9947
Fixed

LIN9-9947 : Security Advisory - libexif - CVE-2020-13112

Created: May 24, 2020    Updated: Jun 3, 2020
Resolved Date: Jun 3, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.25
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.

CREATE(Triage):(User=admin) [CVE-2020-13112|https://nvd.nist.gov/vuln/detail/CVE-2020-13112]

CVEs