Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-bgkn-ux4h-f3gr
Vulnerability ID VCID-bgkn-ux4h-f3gr
Aliases CVE-2007-2645
Summary libexif fails to handle Exif (EXchangeable Image File) data inputs, making it vulnerable to an integer overflow.
Status Published
Exploitability 2.0
Weighted Severity 0.3
Risk 0.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.3209 https://api.first.org/data/v1/epss?cve=CVE-2007-2645
epss 0.3209 https://api.first.org/data/v1/epss?cve=CVE-2007-2645
epss 0.3209 https://api.first.org/data/v1/epss?cve=CVE-2007-2645
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2645.json
https://api.first.org/data/v1/epss?cve=CVE-2007-2645
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645
240055 https://bugzilla.redhat.com/show_bug.cgi?id=240055
424775 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=424775
CVE-2007-2645;OSVDB-35978 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/30024.txt
CVE-2007-2645;OSVDB-35978 Exploit https://www.securityfocus.com/bid/23927/info
GLSA-200706-01 https://security.gentoo.org/glsa/200706-01
USN-471-1 https://usn.ubuntu.com/471-1/
Data source Exploit-DB
Date added May 11, 2007
Description LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow
Ransomware campaign use Known
Source publication date May 11, 2007
Exploit type dos
Platform linux
Source update date Dec. 7, 2013
Source URL https://www.securityfocus.com/bid/23927/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.96941
EPSS Score 0.3209
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:54:59.903730+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200706-01 38.6.0