Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Orangesnn

Researcher fromOSS Fuzz project
#45462of 53,624
5.5Total CVSS
Vulnerabilities · 1
PT-2020-6250
5.5
2020-02-17
Libexif · Libexif · CVE-2020-12767
**Name of the Vulnerable Software and Affected Versions** libexif version 0.6.21 **Description** The issue is related to a lack of division by zero checking in the libexif library, which is used for parsing EXIF files. This can lead to a denial of service when exploited. The `exif entry get value` function in `exif-entry.c` is specifically affected by a divide-by-zero error. **Recommendations** For libexif version 0.6.21, consider applying a patch or fix that addresses the division by zero error in the `exif entry get value` function. As a temporary workaround, consider restricting the use of the `exif entry get value` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.