Lucene search
+L

3742 matches found

Cvelist
Cvelist
added 2021/08/09 12:00 a.m.43 views

CVE-2021-37621 Denial of service due to infinite loop in Image::printIFDStructure

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

5.5CVSS6.4AI score0.01104EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2021/08/09 12:00 a.m.36 views

CVE-2021-32815 Denial of service due to assertion failure in crwimage_int.cpp

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

5.5CVSS6.4AI score0.01104EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2021/08/09 12:00 a.m.20 views

CVE-2021-37615 Null pointer dereference in Exiv2::Internal::resolveLens0x319

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

4.7CVSS5.4AI score0.00989EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/08/09 12:00 a.m.62 views

CVE-2021-37621

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

5.5CVSS6.1AI score0.01104EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/08/09 12:00 a.m.11 views

Exiv2 代码问题漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A null pointer dereference vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

5.5CVSS5.7AI score0.00989EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/08/09 12:00 a.m.6 views

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. an out-of-bounds read vulnerability exists in Exiv2 versions 0.27.4 and earlier. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

5.5CVSS5.7AI score0.00984EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/08/09 12:00 a.m.3 views

PT-2021-6517

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to v0.27.5 Description The issue is related to an infinite loop triggered when Exiv2 is used to read the metadata of a crafted image file. This could potentially be exploited by an attacker to cause a denial of service if...

7.1CVSS6.6AI score0.01113EPSS
SaveExploits0References116
AlpineLinux
AlpineLinux
added 2021/08/09 12:00 a.m.84 views

CVE-2021-34335

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

5.5CVSS5.2AI score0.00984EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/08/09 12:00 a.m.71 views

CVE-2021-37616

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

5.5CVSS5.7AI score0.01034EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/08/09 12:00 a.m.13 views

Exiv2 数字错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker can exploit the vulnerability to cause a denial of service via specially crafted image files...

5.5CVSS5.7AI score0.00984EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2021/08/09 12:00 a.m.37 views

CVE-2021-37615 Null pointer dereference in Exiv2::Internal::resolveLens0x319

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

4.7CVSS5.9AI score0.00989EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/08/09 12:00 a.m.37 views

CVE-2021-37619 Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

4.7CVSS6.2AI score0.00984EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/08/09 12:00 a.m.41 views

CVE-2021-37623 Denial of service due to infinite loop in JpegBase::printStructure (#2)

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.2AI score0.01051EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/08/09 12:00 a.m.5 views

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could use this vulnerability to cause a denial of service via a specially crafted image file...

5.5CVSS5.7AI score0.00984EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2021/08/09 12:00 a.m.67 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.6AI score0.01109EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/08/09 12:00 a.m.64 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5AI score0.01051EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/08/08 12:00 a.m.5 views

PT-2021-7926 · Exiv2 +9 · Exiv2 +9

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: An out-of-bounds read was found in Exiv2, a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered wh...

7.8CVSS6.2AI score0.02555EPSS
SaveExploits10References188
OSV
OSV
added 2021/08/04 3:15 p.m.4 views

CVE-2021-24018

A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image...

8.8CVSS6.3AI score0.01035EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/04 3:15 p.m.9 views

CVE-2021-24018

A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image...

8.8CVSS7.7AI score0.01035EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/07/26 12:00 a.m.9 views

编号撤回

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. jp2image.cpp in Exiv2 version 0.27.3 is vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

6.9AI score
SaveExploits0
Rows per page
Query Builder