VDB
ALPINE-CVE-2020-13114
ALPINE-CVE-2020-13114
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.12 | libexif | 0, 0.6.17-r0, 0.6.19-r0 |
| Alpine:v3.8 | libexif | 0, 0.6.17-r0, 0.6.19-r0 |
| Alpine:v3.11 | libexif | 0, 0, 0.6.17-r0 |
| Alpine:v3.9 | libexif | 0, 0.6.19-r0, 0.6.19-r1 |
| Alpine:v3.10 | libexif | 0, 0.6.17-r0, 0.6.19-r1 |
Timeline
- May 21, 2020 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated