CVE-2021-27815

Katalog CVE

CVSS 5.5 · Medium EPSS 1,3%

Kerentanan NULL Pointer Dereference pada libexif project exif, fedoraproject fedora. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.

Rincian

Terbit di NVD

14 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa patch · advisory pihak ketiga
• https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c patch · advisory pihak ketiga
• https://github.com/libexif/exif/issues/4 exploit · advisory pihak ketiga
• https://security.gentoo.org/glsa/202210-28 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSWAXZVNXYLV3...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMC6OTXZRPCUD...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQ3L45F7S7PQ...