Known vulnerabilities in libexif (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libexif (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libexif_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
0.6.22-3.el7_9
0.6.22-5.el8_4.1
0.6.22-6.el9_2.1
0.6.24-9.el10_0.1
0.6.22-6.el9_6.1
0.6.22-6.el9_4.1
0.6.22-5.el8_6.1
0.6.22-5.el8_8.1
0.6.22-6.el8_10
0.5.12-5.1.0.2.el4_6.1
0.6.13-4.0.2.el5_1.1
0.6.21-17.el8_2
0.6.21-7.el7_8
0.6.21-6.el6_10
0.6.21-17.el8_0
0.6.22-2.el7_9
0.6.21-18.el8_0
0.6.21-18.el8_1
0.6.21-18.el8_2
0.6.22-5.el8_3
0.6.22-4.el8
0.6.22-1.el7
0.6.21-17.el8_1
0.6.13-4.0.2.el5
0.6.21-1.el5_8
0.6.21-5.el6_3
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125897 - Out-of-bounds read CVE-2026-40386 |
CWE-125 | High | 0.6.22-3.el7_9, 0.6.22-5.el8_4.1, 0.6.22-5.el8_6.1, 0.6.22-5.el8_8.1, 0.6.22-6.el8_10, 0.6.22-6.el9_2.1, 0.6.22-6.el9_4.1, 0.6.22-6.el9_6.1, 0.6.24-9.el10_0.1 | 14.04.2026 |
SB2026041446 SB20260414157 SB20260414158 and 13 more |
||
| #VU125896 - Buffer over-read CVE-2026-40385 |
CWE-126 | High | 0.6.22-3.el7_9, 0.6.22-5.el8_4.1, 0.6.22-5.el8_6.1, 0.6.22-5.el8_8.1, 0.6.22-6.el8_10, 0.6.22-6.el9_2.1, 0.6.22-6.el9_4.1, 0.6.22-6.el9_6.1 | 14.04.2026 |
SB2026041446 SB20260414157 SB20260414158 and 12 more |
||
| #VU48198 - Memory corruption CVE-2020-0452 |
CWE-119 | High | 0.6.21-18.el8_0, 0.6.21-18.el8_1, 0.6.21-18.el8_2, 0.6.22-2.el7_9, 0.6.22-5.el8_3 | 08.11.2020 |
SB2020110801 SB2020110802 SB2020111616 and 12 more |
||
| #VU29112 - Integer overflow CVE-2020-0198 |
CWE-190 | High | 0.6.22-4.el8 | 17.06.2020 |
SB2020061703 SB2020061704 SB2020110427 and 7 more |
||
| #VU29111 - Out-of-bounds read CVE-2020-0182 |
CWE-125 | Medium | 0.6.22-1.el7, 0.6.22-4.el8 | 17.06.2020 |
SB2020061703 SB2020061704 SB2020093011 and 1 more |
||
| #VU29108 - Integer overflow CVE-2019-9278 |
CWE-190 | High | 0.6.22-1.el7, 0.6.22-4.el8 | 17.06.2020 |
SB2020052216 SB2020072705 SB2020061149 and 10 more |
||
| #VU34309 - Integer overflow CVE-2020-0181 |
CWE-190 | Medium | 0.6.22-4.el8 | 11.06.2020 |
SB20200611105 SB2020110427 SB2020111616 and 6 more |
||
| #VU28271 - Out-of-bounds read CVE-2020-0093 |
CWE-125 | Low | 0.6.22-1.el7, 0.6.22-4.el8 | 27.05.2020 |
SB2020051428 SB2020052216 SB2020061704 and 10 more |
||
| #VU28184 - Memory corruption CVE-2020-13114 |
CWE-119 | Medium | 0.6.22-1.el7, 0.6.22-4.el8 | 22.05.2020 |
SB2020052216 SB2020061704 SB2020072705 and 8 more |
||
| #VU28183 - Out-of-bounds read CVE-2020-13112 |
CWE-125 | High | 0.6.21-6.el6_10, 0.6.21-7.el7_8, 0.6.21-17.el8_0, 0.6.21-17.el8_2 | 22.05.2020 |
SB2020052216 SB2020061701 SB2020061704 and 12 more |
||
| #VU28182 - NULL Pointer Dereference CVE-2020-13113 |
CWE-476 | Medium | 0.6.22-1.el7, 0.6.22-4.el8 | 22.05.2020 |
SB2020052216 SB2020061704 SB2020072705 and 8 more |
||
| #VU28005 - Divide By Zero CVE-2020-12767 |
CWE-369 | Low | 0.6.22-1.el7, 0.6.22-4.el8 | 19.05.2020 |
SB2020051911 SB2020052216 SB2020072705 and 7 more |