CVE-2020-13114

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.

• CWE-770

• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.htmlMailing List, Third Party Advisory
• https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9babPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/05/msg00025.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-05Third Party Advisory
• https://usn.ubuntu.com/4396-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.htmlMailing List, Third Party Advisory
• https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9babPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/05/msg00025.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-05Third Party Advisory
• https://usn.ubuntu.com/4396-1/Third Party Advisory

Published

May 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13109Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices a…9.8
• CVE-2020-1311An elevation of privilege vulnerability exists when Componen…7.8
• CVE-2020-13110The kerberos package before 1.0.0 for Node.js allows arbitra…7.8
• CVE-2020-13111NaviServer 4.99.4 to 4.99.19 allows denial of service due to…7.5
• CVE-2020-13112An issue was discovered in libexif before 0.6.22. Several bu…9.1
• CVE-2020-13113An issue was discovered in libexif before 0.6.22. Use of uni…8.2
• CVE-2020-13116OpenText Carbonite Server Backup Portal before 8.8.7 allows …5.4
• CVE-2020-13117Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-…9.8
• CVE-2020-13118An issue was discovered in Mikrotik-Router-Monitoring-System…9.8
• CVE-2020-13119ismartgate PRO 1.5.9 is vulnerable to clickjacking.8.1
• CVE-2020-1312An elevation of privilege vulnerability exists in Windows In…7.8
• CVE-2020-13121Submitty through 20.04.01 has an open redirect via authentic…6.1