Source: libexif Version: 0.6.21-5.1 Severity: important Tags: security upstream Forwarded: https://github.com/libexif/libexif/issues/26 Control: found -1 0.6.21-2
Hi, The following vulnerability was published for libexif. CVE-2019-9278[0]: | In libexif, there is a possible out of bounds write due to an integer | overflow. This could lead to remote escalation of privilege in the | media content provider with no additional execution privileges needed. | User interaction is needed for exploitation. Product: AndroidVersions: | Android-10Android ID: A-112537774 If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2019-9278 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9278 [1] https://github.com/libexif/libexif/issues/26 Regards, Salvatore
