exiv2 exiv2 vulnerabilities and exploits

(subscribe to this query)

NA

Buffer overflow in Andreas Huggel Exiv2 prior to 0.9 does not null terminate strings before calling the sscanf function, which allows remote malicious users to cause a denial of service (application crash) via images with crafted IPTC metadata.

Andreas Huggel Exiv2 0.4 Andreas Huggel Exiv2 0.5 Andreas Huggel Exiv2 0.6.2 Andreas Huggel Exiv2 0.7 Andreas Huggel Exiv2 0.3 Andreas Huggel Exiv2 0.8 Andreas Huggel Exiv2 0.6 Andreas Huggel Exiv2 0.6.1

1 EDB exploit

NA

Integer overflow in exif.cpp in exiv2 library allows context-dependent malicious users to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

Exiv2 Exiv2

6.5

CVSSv3

In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.

Exiv2 Exiv2

6.5

CVSSv3

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.

Exiv2 Exiv2

6.5

CVSSv3

The tEXtToDataBuf function in pngimage.cpp in Exiv2 up to and including 0.26 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

Exiv2 Exiv2

6.5

CVSSv3

In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash.

Exiv2 Exiv2

8.1

CVSSv3

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.

Exiv2 Exiv2

8.1

CVSSv3

In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure.

Exiv2 Exiv2

6.5

CVSSv3

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows malicious users to cause a denial of service (DOS) via a crafted tif file.

Exiv2 Exiv2 0.27.99.0

7.8

CVSSv3

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote malicious users to cause a denial of service and other unspecified impacts via use of crafted file.

Exiv2 Exiv2 0.27.1

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook