CVE-2020-13113

—

CVSS 3.1

8.2 high

EPSS

2%p78

Published

May 21, 2020 (May 21, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.

Vendors: libexif project debian canonical opensuse
Products: libexif, debian linux, ubuntu linux, leap
Weakness: CWE-908
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.