NULL Pointer Dereference Affecting exempi package, versions <2.6.0-1


Severity

Recommended
0.0
medium
0
10

Snyk's Security Team recommends NVD's CVSS assessment. Learn more

Threat Intelligence

EPSS
0.07% (33rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about NULL Pointer Dereference vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-DEBIAN12-EXEMPI-2806784
  • published3 May 2022
  • disclosed2 May 2022

Introduced: 2 May 2022

CVE-2021-42528  (opens in a new tab)
CWE-476  (opens in a new tab)

How to fix?

Upgrade Debian:12 exempi to version 2.6.0-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream exempi package and not the exempi package as distributed by Debian. See How to fix? for Debian:12 relevant fixed versions and status.

XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

version 3.1