Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 126

Export CSV
CVE-2018-10772

exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Exiv2 Redhat
Products
Exiv2 Enterprise Linux
CVE-2017-17725

exiv2: heap-based buffer over-read in Exiv2::getULong function in types.cpp

In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864, which is an invalid memory address dereference.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Exiv2
Products
Exiv2
CVE-2017-17724

exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Exiv2 Redhat
Products
Exiv2 Enterprise Linux
CVE-2017-17723

exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file.

CVSS 3.0 · 8.1 High EPSS 1.8% KEV · Not listed
Vendors
Exiv2
Products
Exiv2
CVE-2017-17722

exiv2: reachable assertion in the readHeader function in bigtiffimage.cpp

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Exiv2
Products
Exiv2
CVE-2020-19715

exiv2: integer buffer overflow in getUShort fucntion leads to DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of CVE-2019-13110. Notes: All CVE users should reference CVE-2019-13110 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
Exiv2
Products
Exiv2