CVE-2018-8976

Synopsis Low: exiv2 security, bug fix, and enhancement update Type/Severity Security Advisory: Low Topic An update for exiv2 is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base sc ...

Debian Bug report logs - #903813 exiv2: CVE-2018-8976 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 15 Jul 2018 07:24:01 UTC Severity: important Tags: fixed-upstream, patch, security, up ...

An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory(CVE-2017-17724) The tEXtToDataBuf function in pngimagecpp in Exiv2 ...

In Exiv2 026, jpgimagecpp allows remote attackers to cause a denial of service (imagecpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file ...