CVE-2017-7544

2017-09-2120:00:00

CWE-125

redhat

www.cve.org

AI Score

8.5

Confidence

High

EPSS

0.004

Percentile

73.3%

JSON

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

CNA Affected

[
  {
    "product": "libexif",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "through 0.6.21"
      }
    ]
  }
]