CVE-2017-14860

exiv2: Heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-14861

exiv2: Stack consumption in the Exiv2::Internal::stringFormat function

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-1000127

exiv2: Heap buffer overflow in tiff parser

Exiv2 0.26 contains a heap buffer overflow in tiff parser

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-14857

exiv2: Invalid free in the Image class

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-14864

exiv2: Invalid memory address dereference in Exiv2::getULong

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Canonical Debian Exiv2

Products

Ubuntu Linux Debian Linux Exiv2

CVE-2017-14865

exiv2: Heap-based buffer overflow in the Exiv2::us2Data function

There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-9953

exiv2: Segmentation fault in Image::printIFDStructure

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 7.5 High EPSS 2.8% KEV · Not listed

Vendors

Exiv2 Redhat

Products

Exiv2 Enterprise Linux

CVE-2017-17669

exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Canonical Debian Exiv2

Products

Ubuntu Linux Debian Linux Exiv2

CVE-2017-11683

exiv2: Reachable assertion in the Internal::TiffReader::visitDirectory function

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed

Vendors

Canonical Debian Exiv2

Products

Ubuntu Linux Debian Linux Exiv2

CVE-2017-11336

exiv2: Heap-based buffer over-read in the Image::printIFDStructure

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-11338

exiv2: Infinite loop in the Exiv2::Image::printIFDStructure

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-9239

exiv2: Segmentation fault in TiffImageEntry::doWriteImage function

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Canonical Exiv2

Products

Ubuntu Linux Exiv2

CVE-2017-18005

exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Exiv2 Redhat

Products

Debian Linux Exiv2 Enterprise Linux

CVE-2017-12956

exiv2: Illegal address access in in Exiv2::FileIo::path[abi:cxx11]()

There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-12955

exiv2: Heap-based buffer overflow in basicio.cpp

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-12957

exiv2: Heap-based buffer over-read in Exiv2::Image::io function

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-11337

exiv2: Invalid free in the Action::TaskFactory::cleanup

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2017-1000126

exiv2: Out-of-bounds read in webp parser

exiv2 0.26 contains a Stack out of bounds read in webp parser

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2

CVE-2014-9449

exiv2: buffer overflow in RiffVideo::infoTagsHandler

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed

Vendors

Exiv2 Fedoraproject

Products

Exiv2 Fedora

CVE-2023-44398

Out-of-bounds write in exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Exiv2

Products

Exiv2