CVE-2020-12767

Name of the Vulnerable Software and Affected Versions libexif version 0.6.21

Description The issue is related to a lack of division by zero checking in the libexif library, which is used for parsing EXIF files. This can lead to a denial of service when exploited. The exif entry get value function in exif-entry.c is specifically affected by a divide-by-zero error.

Recommendations For libexif version 0.6.21, consider applying a patch or fix that addresses the division by zero error in the exif entry get value function. As a temporary workaround, consider restricting the use of the exif entry get value function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.