Ubuntu Security Notice USN-91-1 – Sylvain Defresne discovered that the EXIF library did not properly validate the structure of the EXIF tags. By tricking a user to load an image with a malicious EXIF tag, an attacker could exploit this to crash the process using the library, or even execute arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36506/USN-91-1.txt
Source: https://packetstormsecurity.com/files/36506/Ubuntu-Security-Notice-91-1.html