Gentoo Linux Security Advisory GLSA 200706-09 – iDefense Labs have discovered that the exif_data_load_data_entry() function in libexif/exif-data.c improperly handles integer data while working with an image with many EXIF components, allowing an integer overflow possibly leading to a heap-based buffer overflow. Versions less than 0.6.16 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57327/glsa-200706-09.txt
Source: https://packetstormsecurity.com/files/57327/Gentoo-Linux-Security-Advisory-200706-9.html