{"id":"ASB-A-196085005","details":"An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.","aliases":["A-196085005","CVE-2020-13113"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-02-01"}],"affected":[{"package":{"name":"platform/external/libexif","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-02-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libexif/+/c9da78d8d9f302c767b366ef256e24fa32f8784f","https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232"],"severity":"High","spl":"2022-02-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-196085005-45cb83fc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/olympus/exif-mnote-data-olympus.c"},"deprecated":false,"digest":{"line_hashes":["171665474353090061899021564791197257152","116301063513059510679027604740839939787","33983948157538593294138539723360334410","231840623465655071498280023479608178034"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/pentax/exif-mnote-data-pentax.c","function":"exif_mnote_data_pentax_load"},"deprecated":false,"digest":{"function_hash":"183404549225358201605541302295976617143","length":3510},"id":"ASB-A-196085005-500e6a39"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/canon/exif-mnote-data-canon.c","function":"exif_mnote_data_canon_load"},"deprecated":false,"digest":{"length":2636,"function_hash":"230472758768611256226825674298003938134"},"id":"ASB-A-196085005-52cf7f82","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/fuji/exif-mnote-data-fuji.c"},"deprecated":false,"digest":{"line_hashes":["182556739721751607620424315492830018068","63090266439464873986942635232246469126","133352749772712821961584651055235107129","59814921405938895402439206079570764350"],"threshold":0.9},"id":"ASB-A-196085005-5d4bce62"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/fuji/exif-mnote-data-fuji.c","function":"exif_mnote_data_fuji_load"},"deprecated":false,"digest":{"function_hash":"113168632477656210553710536030160313989","length":2820},"id":"ASB-A-196085005-66798d65","signature_type":"Function"},{"digest":{"function_hash":"189747278139490779873991802493815478765","length":6441},"id":"ASB-A-196085005-adb7db80","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/olympus/exif-mnote-data-olympus.c","function":"exif_mnote_data_olympus_load"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["182556739721751607620424315492830018068","63090266439464873986942635232246469126","133352749772712821961584651055235107129","87180012295696138925344357238405859904"],"threshold":0.9},"id":"ASB-A-196085005-dd189b4f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/pentax/exif-mnote-data-pentax.c"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/canon/exif-mnote-data-canon.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["182556739721751607620424315492830018068","63090266439464873986942635232246469126","225602874433340598213515522161546468010","215464518781960057437098919856189329355"]},"id":"ASB-A-196085005-e339df47","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196085005.json"}},{"package":{"name":"platform/external/libexif","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-02-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"libexif/canon/exif-mnote-data-canon.c"},"deprecated":false,"digest":{"line_hashes":["182556739721751607620424315492830018068","63090266439464873986942635232246469126","225602874433340598213515522161546468010","215464518781960057437098919856189329355"],"threshold":0.9},"id":"ASB-A-196085005-130a0623","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/pentax/exif-mnote-data-pentax.c","function":"exif_mnote_data_pentax_load"},"deprecated":false,"digest":{"length":3510,"function_hash":"183404549225358201605541302295976617143"},"id":"ASB-A-196085005-20c7c86e","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"function":"exif_mnote_data_fuji_load","file":"libexif/fuji/exif-mnote-data-fuji.c"},"deprecated":false,"digest":{"length":2820,"function_hash":"113168632477656210553710536030160313989"},"id":"ASB-A-196085005-3144475c"},{"digest":{"line_hashes":["182556739721751607620424315492830018068","63090266439464873986942635232246469126","133352749772712821961584651055235107129","59814921405938895402439206079570764350"],"threshold":0.9},"id":"ASB-A-196085005-6aaef996","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/fuji/exif-mnote-data-fuji.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["171665474353090061899021564791197257152","116301063513059510679027604740839939787","33983948157538593294138539723360334410","231840623465655071498280023479608178034"],"threshold":0.9},"id":"ASB-A-196085005-901b89c8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/olympus/exif-mnote-data-olympus.c"}},{"target":{"file":"libexif/canon/exif-mnote-data-canon.c","function":"exif_mnote_data_canon_load"},"deprecated":false,"digest":{"function_hash":"230472758768611256226825674298003938134","length":2636},"id":"ASB-A-196085005-a972d32c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232"},{"digest":{"length":6441,"function_hash":"189747278139490779873991802493815478765"},"id":"ASB-A-196085005-ad14afa8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/olympus/exif-mnote-data-olympus.c","function":"exif_mnote_data_olympus_load"},"deprecated":false},{"digest":{"threshold":0.9,"line_hashes":["182556739721751607620424315492830018068","63090266439464873986942635232246469126","133352749772712821961584651055235107129","87180012295696138925344357238405859904"]},"id":"ASB-A-196085005-c70dca5d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232","target":{"file":"libexif/pentax/exif-mnote-data-pentax.c"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/external/libexif/+/c9da78d8d9f302c767b366ef256e24fa32f8784f","https://android.googlesource.com/platform/external/libexif/+/4ceb535b530fd8d0504c9df65c99045a71e12232"],"severity":"High","spl":"2022-02-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-196085005.json"}}],"schema_version":"1.9.0"}