Wind River Support Network

HomeDefectsLINCD-2100

Fixed

LINCD-2100 : Security Advisory - libexif - CVE-2020-13112

Created: May 24, 2020 Updated: Sep 13, 2022

Resolved Date: Jun 8, 2020

Found In Version: 10.20.6.0, 10.20.21.0

Fix Version: 10.20.27.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.

CREATE(Triage):(User=admin) CVE-2020-13112 (https://nvd.nist.gov/vuln/detail/CVE-2020-13112)

CVEs

CVE-2020-13112