Medium
Security advisory
NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-27815
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:42 UTC · Revision 1
Source evidence
NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.
osv:CVE-2021-27815
Complete source record
{
"id": "be8df4531234ce7f2c5ab86a2d1495903b064245a36304bb0e49dd7ef10e44cb",
"url": "https://osv.dev/vulnerability/CVE-2021-27815",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-27815",
"summary": "NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.",
"evidence": "osv:CVE-2021-27815",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2021-27815",
"aliases": [
"CVE-2021-27815"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/libexif/exif",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "edad134a28caaa7ea324b8c075bde52da05ad7d9"
},
{
"fixed": "eb84b0e3c5f2a86013b6fcfb800d187896a648fa"
},
{
"fixed": "f6334d9d32437ef13dc902f0a88a2be0063d9d1c"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libexif_project:exif:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "0.6.22"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "eb84b0e3c5f2a86013b6fcfb800d187896a648fa"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "f6334d9d32437ef13dc902f0a88a2be0063d9d1c"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"exif-0_6_22-release",
"cvs-migration",
"exif-0_6_21-release",
"exif-0_6_20-release",
"exif-0_6_19-release",
"exif-0_6_18-release",
"exif-0_6_17-release",
"exif-0_6_15-release",
"exif-0_6_9-release",
"exif-0_6-release"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-27815.json",
"vanir_signatures": [
{
"id": "CVE-2021-27815-32de5894",
"digest": {
"length": 826,
"function_hash": "117739525872714467810242060778568890977"
},
"source": "https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa",
"target": {
"file": "exif/actions.c",
"function": "escape_xml"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-27815-5a7bcf89",
"digest": {
"length": 774,
"function_hash": "66487071761578745178268823097657667458"
},
"source": "https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c",
"target": {
"file": "exif/actions.c",
"function": "escape_xml"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2021-27815-d8c64ba2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"56429957118893573836594359231792757542",
"236708506390338073920272238376695567027",
"251815281604461825816962047897251030965"
]
},
"source": "https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c",
"target": {
"file": "exif/actions.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2021-27815-e50fe298",
"digest": {
"threshold": 0.9,
"line_hashes": [
"267985955826095369399255340329894694665",
"206567539733347984706140851524349779254",
"161934927561592451764293787085084039009",
"166523331223495064149312083299725894127"
]
},
"source": "https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa",
"target": {
"file": "exif/actions.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:17:18Z"
}
}
],
"modified": "2026-10-20T14:17:18.567110088Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSWAXZVNXYLV3E4R6YQTEGRGMGWEAR76/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMC6OTXZRPCUD3LOSWO4ISR7CH7NJQDT/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQ3L45F7S7PQPG5HEHXOCGNOO64MJOS/",
"https://security.gentoo.org/glsa/202210-28",
"https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa",
"https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c",
"https://github.com/libexif/exif/issues/4"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "32"
},
{
"last_affected": "32"
},
{
"introduced": "33"
},
{
"last_affected": "33"
},
{
"introduced": "34"
},
{
"last_affected": "34"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2021-27815",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388774,
"published_at": "2021-04-14T14:15:13.787+00:00"
}