CVE-2006-4168: Libexif

Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.

Affected products

• Libexif Libexif: version 0.6.9 only; version 0.6.11 only; version 0.6.12 only; version 0.6.13 only; version 0.6.14 only; version 0.6.15 only

Published 2007-06-14. Last modified 2026-06-16.