It was found that specially crafted XIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags could be used for a denial of service.
Created libexif tracking bugs for this issue:
Affects: fedora-all [bug 1663879]
Function exif_data_load_data_content() in exif-data.c recursively calls itself when EXIF_TAG_EXIF_IFD_POINTER, EXIF_TAG_INTEROPERABILITY_IFD_POINTER or EXIF_TAG_GPS_INFO_IFD_POINTER tags are found. A specially crafted file may abuse this recursion by making the program waste a lot of time on it.