CVE-2012-2840

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers…

published July 13, 2012

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05057 · 92.3th percentile
Published
2012-07-13T10:00Z
EPSS history
Timeline
  • 13 JUL 10:00Z
    Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers…
    cvelistv5