Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/libexif@0.6.21-r0?arch=aarch64&distroversion=v3.18&reponame=community |
| Type | apk |
| Namespace | alpine |
| Name | libexif |
| Version | 0.6.21-r0 |
| Qualifiers |
| arch |
aarch64 |
| distroversion |
v3.18 |
| reponame |
community |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 0.6.21-r3 |
| Latest_non_vulnerable_version | 0.6.23-r0 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-1qye-wx7e-puda |
| vulnerability_id |
VCID-1qye-wx7e-puda |
| summary |
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2840
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1qye-wx7e-puda |
|
| 1 |
| url |
VCID-22jn-mcwn-j3ax |
| vulnerability_id |
VCID-22jn-mcwn-j3ax |
| summary |
The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2812 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00928 |
| scoring_system |
epss |
| scoring_elements |
0.76455 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00928 |
| scoring_system |
epss |
| scoring_elements |
0.76484 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00928 |
| scoring_system |
epss |
| scoring_elements |
0.7649 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00928 |
| scoring_system |
epss |
| scoring_elements |
0.7648 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2812 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2812
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-22jn-mcwn-j3ax |
|
| 2 |
| url |
VCID-44bu-3z7v-5ydx |
| vulnerability_id |
VCID-44bu-3z7v-5ydx |
| summary |
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2837 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01256 |
| scoring_system |
epss |
| scoring_elements |
0.79712 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.01256 |
| scoring_system |
epss |
| scoring_elements |
0.79738 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.01256 |
| scoring_system |
epss |
| scoring_elements |
0.79743 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.01256 |
| scoring_system |
epss |
| scoring_elements |
0.79739 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2837 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2837
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-44bu-3z7v-5ydx |
|
| 3 |
| url |
VCID-46sb-z45u-aqhp |
| vulnerability_id |
VCID-46sb-z45u-aqhp |
| summary |
Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain potentially sensitive information via a crafted JPEG file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2845 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00624 |
| scoring_system |
epss |
| scoring_elements |
0.70544 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00624 |
| scoring_system |
epss |
| scoring_elements |
0.70586 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00624 |
| scoring_system |
epss |
| scoring_elements |
0.70596 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00624 |
| scoring_system |
epss |
| scoring_elements |
0.70578 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2845 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2845
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-46sb-z45u-aqhp |
|
| 4 |
| url |
VCID-ceaj-6s1m-3yak |
| vulnerability_id |
VCID-ceaj-6s1m-3yak |
| summary |
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2836 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02522 |
| scoring_system |
epss |
| scoring_elements |
0.85693 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.02522 |
| scoring_system |
epss |
| scoring_elements |
0.85715 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.02522 |
| scoring_system |
epss |
| scoring_elements |
0.85718 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.02522 |
| scoring_system |
epss |
| scoring_elements |
0.85714 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2836 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2836
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ceaj-6s1m-3yak |
|
| 5 |
| url |
VCID-fwj4-n4af-wued |
| vulnerability_id |
VCID-fwj4-n4af-wued |
| summary |
Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2814
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fwj4-n4af-wued |
|
| 6 |
| url |
VCID-g856-qmgw-fbca |
| vulnerability_id |
VCID-g856-qmgw-fbca |
| summary |
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2841
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g856-qmgw-fbca |
|
| 7 |
| url |
VCID-v2pe-r74z-fucm |
| vulnerability_id |
VCID-v2pe-r74z-fucm |
| summary |
The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2813 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00933 |
| scoring_system |
epss |
| scoring_elements |
0.76518 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00933 |
| scoring_system |
epss |
| scoring_elements |
0.76548 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00933 |
| scoring_system |
epss |
| scoring_elements |
0.76553 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00933 |
| scoring_system |
epss |
| scoring_elements |
0.76542 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-2813 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-2813
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-v2pe-r74z-fucm |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libexif@0.6.21-r0%3Farch=aarch64&distroversion=v3.18&reponame=community |