vulnerability
Oracle Solaris 11: CVE-2019-9278: Vulnerability in libexif
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Sep 27, 2019 | Jan 19, 2021 | Feb 17, 2022 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Sep 27, 2019
Added
Jan 19, 2021
Modified
Feb 17, 2022
Description
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774
Solution
oracle-solaris-11-4-upgrade-image-library-libexif-0-6-21-11-4-21-0-1-69-0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.