AZL-7206 CVE-2021-29457 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An...

Andreas Huggel Exiv2 安全漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 0.27.3 and earlier versions suffer from a heap buffer overflow vulnerability when writing metadata to specially crafted image files. An attacker could exploit this vulnerability to execute code via a...

Exiv2 heap buffer overflow vulnerability (CNVD-2021-29115)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 suffers from a heap buffer overflow vulnerability. The vulnerability stems from improper validation of input to the rawData.size property in Jp2Image::readMetadata in jp2image.cpp. An attacker could...

UBUNTU-CVE-2021-3482

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

PT-2021-4547 · Exiv2 +9 · Exiv2 +9

Name of the Vulnerable Software and Affected Versions: Exiv2 versions prior to 0.27.4-RC1 Description: The issue is related to the Jp2Image::readMetadata function in the jp2image.cpp component of the Exiv2 library, which is used for managing media file metadata. The problem arises from improper...

The vulnerability of the Exiv2 metadata management library, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Exiv2 media metadata management library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through the use of a specially created CRW file...

exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS

A denial of service vulnerability was found in exiv2 in the way JPEG 2000 JP2 metadata was read when processing an image file. A remote attacker could abuse this flaw to create a specially crafted image, causing exiv2 to enter into an infinite loop when processing an incoming malicious image...

exiv2: invalid data location in CRW image file causing denial of service

Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to assertion failure via an invalid data location in a CRW image file...

exiv2: denial of service in PngImage::readMetadata

An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction...

exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...

exiv2: out of bounds read in IptcData::printStructure in iptc.c

An out-of-bounds read vulnerability has been discovered in IptcData::printStructure in iptc.cpp file of Exiv2 0.26. An attacker could cause a crash or an information leak by providing a crafted image...

The vulnerability of the Exiv2::Internal::PngChunk::parseTXTChunk function in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the Exiv2::Internal::PngChunk::parseTXTChunk function in the Exiv2 metadata management library involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure through the use of a specially created...

Ubuntu 16.04 LTS / 18.04 LTS : Exiv2 vulnerability (USN-4270-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4270-1 advisory. It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. Tenable has...

CVE-2019-20421

In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

USN-4159-1: Exiv2 vulnerability

It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...

AZL-7204 CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

PYSEC-2019-247

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...