{"id":"ALPINE-CVE-2012-2841","details":"Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.","modified":"2026-09-05T06:17:52.583617880Z","published":"2012-07-13T10:34:59.593Z","upstream":["CVE-2012-2841"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2012-2841"}],"affected":[{"package":{"name":"libexif","ecosystem":"Alpine:v3.10","purl":"pkg:apk/alpine/libexif?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2012-2841.json"}},{"package":{"name":"libexif","ecosystem":"Alpine:v3.11","purl":"pkg:apk/alpine/libexif?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2012-2841.json"}},{"package":{"name":"libexif","ecosystem":"Alpine:v3.12","purl":"pkg:apk/alpine/libexif?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2012-2841.json"}},{"package":{"name":"libexif","ecosystem":"Alpine:v3.8","purl":"pkg:apk/alpine/libexif?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2012-2841.json"}},{"package":{"name":"libexif","ecosystem":"Alpine:v3.9","purl":"pkg:apk/alpine/libexif?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2012-2841.json"}}],"schema_version":"1.9.0"}