CVE-2005-0664: Libexif

Low severity, CVSS 2.6. EPSS: 4.5% chance of exploitation in the next 30 days.

Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.

Affected products

• Libexif Libexif: version 0.6.9 only

Published 2005-05-02. Last modified 2026-06-16.