external_libexif_AOSP10_r33_CVE-2020-0198

libexif ------- BESCHREIBUNG libexif ist eine Bibliothek zum Analysieren, Bearbeiten und Speichern von EXIF-Daten. Sie soll viele redundante Implementierungen in Kommandozeilenwerkzeugen und Programmen mit GUIs ersetzen. MERKMALE libexif unterstützt das Analysieren, Bearbeiten und Speichern von...

basecrack

BaseCrack Decoder für Base-Codierungsschemata BaseCrack ist ein in Python geschriebenes Tool, das alle alphanumerischen Base-Codierungsschemata decodieren kann. Dieses Tool kann einzelne Benutzereingaben, mehrere Eingaben aus einer Datei, Eingaben aus Argumenten, mehrfach codierte Basen , Basen i...

xzf

Introdução xzf é uma PoC simples demonstrando como dados EXIF podem ser usados para comando e controle. xzf obtém uma imagem de uma URL predefinida, então lê a tag software para uma string de autenticação. Se a string corresponder, xzf executará qualquer coisa contida na tag ImageDescription. Uso...

FOCA

FOCA Identifizierung von Organisationen mittels gesammelter Archive FOCA ist ein Werkzeug, das hauptsächlich dazu dient, Metadaten und versteckte Informationen in den gescannten Dokumenten zu finden. Diese Dokumente können sich auf Webseiten befinden und mit FOCA heruntergeladen und analysiert...

LocalExifGeoMap

Mappa Exif Geo Locale 📍 Uno strumento potente, incentrato sulla privacy, basato su browser per visualizzare e analizzare i dati GPS delle tue foto. Basta trascinare e rilasciare le immagini per generare mappe interattive, mappe di calore, profili di elevazione e statistiche di viaggio. Perché? Ho...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim oder apt-get install vim $ pkg install jhead oder apt-get install jhead $ jhead -h für Hilfe $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Drücke ESC und tippe :x zum Speichern $ jhead yourfiles.jpg Beispiel :...

libexif_Android10_r33_CVE-2016-6328

libexif ------- DESCRIÇÃO libexif é uma biblioteca para análise, edição e salvamento de dados EXIF. Ela pretende substituir muitas implementações redundantes em utilitários de linha de comando e programas com interfaces gráficas. CARACTERÍSTICAS libexif suporta análise, edição e salvamento de...

ExifSmugglingPoC

Exif Smuggling Eine Proof-of-Concept-Weiterentwicklung von Cache Smuggling. Dieser Angriff verbirgt eine ausführbare Nutzlast in den Exif-Daten eines JPGs. Dadurch kann das Zwischenspeichern von Bildern z. B. in einem Webbrowser genutzt werden, um die Nutzlast passiv herunterzuladen. Folglich mus...

EUVD-2026-54561

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-19082

Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...

CVE-2026-66040 FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

CVE-2026-66040

FFmpeg

PT-2026-64416

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.2 Description A heap out-of-bounds write exists in the native PNG and APNG encoders. A remote attacker can corrupt heap memory by providing a crafted PNG image containing a malicious eXIf chunk. By creating an eXIf...

Linux Distros Unpatched Vulnerability : CVE-2026-14454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as...

DEBIAN-CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

UBUNTU-CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-14454 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. ...

CVE-2026-56218

Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing information disclosure. Attackers can download uploaded images and extract precise latitude and longitude coordinates revealing user physical location at capture time...