CVE-2017-7544
CriticalSummary
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function. The issue is caused by improper length computation of the allocated data of an ExifMnote entry, which can lead to denial-of-service or possibly information disclosure.
Risk Assessment
This vulnerability may lead to denial-of-service, affecting application availability, and could result in the disclosure of sensitive information, posing a security threat to the organization.
Recommendation
It is recommended to update libexif to a version that is not vulnerable to this issue to minimize the risk of denial-of-service and information disclosure.
Original NVD description (English source)
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.