CVE-2012-2837: Libexif Project Libexif

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Affected products

• Libexif Project Libexif: up to and including 0.6.20; version 0.6.14 only; version 0.6.15 only; version 0.6.16 only; version 0.6.18 only; version 0.6.19 only

Published 2012-07-13. Last modified 2026-06-16.