Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

libexif can crash due to division by zero

CVE-2020-12767 · published 6 years ago
Summary

The libexif library used in Debian and Alpine Linux can encounter a division‑by‑zero condition when processing certain image data, which may cause the program using it to stop unexpectedly. This could lead to a temporary loss of service for applications that rely on the library to read picture information. Update libexif to a newer version or apply the vendor’s patch to prevent the crash.

What to do
  • Update debian libexif to version 0.6.21-7.
  • Update alpine libexif to version 0.6.22-r0.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian libexif < 0.6.21-7
Fix: upgrade to 0.6.21-7
Debian:13 debian libexif < 0.6.21-7
Fix: upgrade to 0.6.21-7
Debian:14 debian libexif < 0.6.21-7
Fix: upgrade to 0.6.21-7
Alpine:v3.10 alpine libexif < 0.6.22-r0
Fix: upgrade to 0.6.22-r0
– libexif_project libexif 0.6.21
cpe:2.3:a:libexif_project:libexif:0.6.21:*:*:*:*:*:*:*
– debian debian_linux 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
– canonical ubuntu_linux 12.04
14.04
16.04
18.04
19.10
20.04
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
– opensuse leap 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Original advisory text
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
References
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-369Divide By Zero
Timeline
Published9 May 2020
Updated4 Nov 2026
First seen11 Sep 2026
Sources
DEBIAN-CVE-2020-12767 · OSV
ALPINE-CVE-2020-12767 · OSV
CVE-2020-12767 · NVD
Track software like this
Free during beta