CVE-2020-0198
11.06.2020, 15:15
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| android | 10.0 | |
| libexif_project | libexif | 𝑥 < 0.6.22_p20201105 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| canonical | ubuntu_linux | 20.04 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libexif-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libexif12 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libexif12-32bit |
|
Red Hat Enterprise Linux Releases
References