VDB
ALPINE-CVE-2020-13114
ALPINE-CVE-2020-13114
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.12 | libexif | 0.6.21-r3, 0.6.17-r0, 0.6.19-r0 |
| Alpine:v3.8 | libexif | 0, 0.6.17-r0, 0.6.19-r0 |
| Alpine:v3.11 | libexif | 0.6.21-r3, 0, 0.6.17-r0 |
| Alpine:v3.9 | libexif | 0, 0.6.19-r0, 0.6.19-r1 |
| Alpine:v3.10 | libexif | 0, 0.6.17-r0, 0.6.19-r1 |
Timeline
- May 21, 2020 CVE Published
- Nov 19, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch