Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 13

Export CSV
CVE-2020-18652

exempi: denial of service via opening of crafted webp file

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Exempi Project Redhat
Products
Exempi Enterprise Linux
CVE-2020-18651

exempi: denial of service via opening of crafted audio file with ID3V2 frame

Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Exempi Project Redhat
Products
Exempi Enterprise Linux
CVE-2018-7731

exempi: NULL pointer dereference in XMPFiles/source/FormatSupport/WEBP_Support.cpp:WEBP::VP8XChunk allows for denial of service via crafted file

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Exempi Project
Products
Ubuntu Linux Exempi
CVE-2018-7730

exempi: Heap-based buffer overflow in PSD_MetaHandler::CacheFileData function in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp allows for denial of service via crafted XLS file

An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, leading to a heap-based buffer over-read in the PSD_MetaHandler::CacheFileData() function.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Exempi Project and 1 more
Products
Ubuntu Linux Debian Linux Exempi and 1 more
CVE-2018-7729

exempi: Stack-based buffer overflow in XMPFiles/source/FileHandlers/PostScript_Handler.cpp:PostScript_MetaHandler::ParsePSFile() allows for denial of service

An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler::ParsePSFile() function in XMPFiles/source/FileHandlers/PostScript_Handler.cpp.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Exempi Project
Products
Ubuntu Linux Exempi
CVE-2018-7728

exempi: Heap-based buffer overflow in third-party/zuid/interfaces/MD5.cpp:MD5Update() allows for denial of service via crafted TIFF image

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update() function in third-party/zuid/interfaces/MD5.cpp.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Debian Exempi Project
Products
Ubuntu Linux Debian Linux Exempi
CVE-2018-12648

exempi: NULL pointer dereference in WEBP_Support.hpp:WEBP::GetLE32() allows for denial of service

The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Exempi Project
Products
Exempi
CVE-2017-18238

exempi: Infinite loop in TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp

An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .qt file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Exempi Project Redhat
Products
Debian Linux Exempi Enterprise Linux
CVE-2017-18237

exempi: null pointer dereference in PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp

An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Exempi Project
Products
Exempi
CVE-2017-18236

exempi: Infinite loop in ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp

An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted .asf file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Exempi Project and 1 more
Products
Ubuntu Linux Debian Linux Exempi and 1 more
CVE-2017-18235

exempi: assertion failure in VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp

An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted .webp file.

CVSS 3.0 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Exempi Project
Products
Exempi
CVE-2017-18234

exempi: Use after free via a PDF file containing JPEG data

An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp, and XMPFiles/source/FormatSupport/TIFF_Support.hpp.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Exempi Project and 1 more
Products
Ubuntu Linux Debian Linux Exempi and 1 more
CVE-2017-18233

exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp

An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .avi file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Exempi Project and 1 more
Products
Ubuntu Linux Debian Linux Exempi and 1 more