In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libexif | Aug 22, 2024 | Sep 27, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libexif-debuginfoUpgrade libexif-develUpgrade libexifUpgrade libexif-doc | Oct 28, 2020 | Sep 27, 2019 |
| Centos_linux | — | Upgrade libexif-docUpgrade libexifUpgrade libexif-debugsourceUpgrade libexif-debuginfoUpgrade libexif-devel | Oct 1, 2020 | Sep 27, 2019 |
| Debian | — | Upgrade libexif | Feb 10, 2020 | Sep 27, 2019 |
| Freebsd | — | Upgrade libexif | Feb 12, 2020 | Feb 11, 2020 |
| Gentoo Linux | — | Upgrade media-libs/libexif. | Jul 28, 2020 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libexif | Feb 22, 2021 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libexif | Jan 20, 2021 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libexif | Nov 2, 2020 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libexif | Aug 31, 2020 | Sep 27, 2019 |
| Oracle Solaris | — | Upgrade image/library/libexif to version 0.6.21-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade libexifUpgrade libexif-develUpgrade libexif-doc | Oct 7, 2020 | Dec 1, 2019 |
| Redhat_linux | — | Upgrade libexif-docUpgrade libexifUpgrade libexif-debuginfoUpgrade libexif-develUpgrade libexif-debugsourceNo solution exists | Oct 1, 2020 | Sep 27, 2019 |
| Suse | — | Upgrade libexifUpgrade libexif-develUpgrade libexif12Upgrade libexif12-32bitUpgrade libexif-devel-32bitUpgrade libexif-32bit | Mar 3, 2020 | Sep 27, 2019 |
| Ubuntu | — | Upgrade libexif12Upgrade libexif12 (Ubuntu Pro) | Feb 12, 2020 | Sep 27, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub