CVEs-PoC/2016/CVE-2016-6328.md

CVE-2016-6328

Description

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).

POC

Reference

No PoCs from references.

Github

• https://github.com/Pazhanivelmani/libexif_Android10_r33_CVE-2016-6328
• https://github.com/TinyNiko/android_bulletin_notes