Wind River Support Network

HomeDefectsLIN1019-4676

Fixed

LIN1019-4676 : Security Advisory - libexif - CVE-2020-13114

Created: May 24, 2020 Updated: May 13, 2022

Resolved Date: May 28, 2020

Found In Version: 10.19.45.1

Fix Version: 10.19.45.8

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.

CREATE(Triage):(User=admin) CVE-2020-13114 (https://nvd.nist.gov/vuln/detail/CVE-2020-13114)

CVEs

CVE-2020-13114