CVE-2007-6352: Libexif

Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Affected products

• Libexif Libexif: up to and including 0.6.16

Published 2007-12-20. Last modified 2026-06-16.