CVE-2016-6328: Integer Overflow
Published Oct 31, 2018
·Updated
A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).
Affected Software
9 affected componentsFixes available
Google Android
Libexif Project Libexif<0.6.22
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.10
Debian Debian Linux=8.0
debian/libexif
0.6.22-30.6.24-10.6.25-1
Remediation
Patch Available
Event History
Oct 31, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 4, 2021
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:20 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·06:03 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·06:04 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2016-6328.
2
What is the severity of CVE-2016-6328?
The severity of CVE-2016-6328 is high with a CVSS score of 8.1.
3
What is the affected software?
The affected software includes libexif versions up to and including 0.6.21-1ubuntu1+.
4
What are the potential impacts of CVE-2016-6328?
The potential impacts of CVE-2016-6328 include Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).
5
Where can I find more information about CVE-2016-6328?
You can find more information about CVE-2016-6328 at the following references: [1] [2] [3].