CVE-2016-6328CWE-190

A vulnerability was found in libexif

Medium · published October 31, 2018

CVSS v3.0
6.1
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01676 · 76.7th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2018-10-31T21:00Z
EPSS history
Timeline
  • 31 OCT 21:00Z
    A vulnerability was found in libexif
    cvelistv5