CVE-2021-34334

CVE-2021-34334 affects Exiv2 (image metadata tool/library). A crafted image file can trigger an infinite loop when reading metadata, potentially causing a denial of service if a user runs Exiv2 on the crafted file. Public reports across multiple vendors/sources confirm the issue and indicate the ...

Exiv2 安全漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an infinite loop. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

CVE-2021-37623

CVE-2021-37623 affects Exiv2 (v0.27.4 and earlier). An infinite loop is triggered when deleting IPTC metadata on a crafted image, which can lead to denial of service if Exiv2 is run on the crafted file. The issue is fixed in v0.27.5. Connected advisories corroborate Exiv2 as the affected componen...

CVE-2021-37618 Out-of-bounds read in Exiv2::Jp2Image::printStructure

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could use this vulnerability to cause a denial of service via a specially crafted image file...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could exploit this vulnerability via specially crafted image files to cause a denial of service...

CVE-2021-34335

Exiv2 v0.27.4 and earlier have a denial-of-service risk caused by a floating-point exception (divide-by-zero) when printing translated metadata (requires -p t). The issue triggers on crafted image files and can be exploited to crash Exiv2, not a general compromise. The vulnerability is fixed in v...

CVE-2021-37616

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

CVE-2021-37618

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. an out-of-bounds read vulnerability exists in Exiv2 versions 0.27.4 and earlier. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

Exiv2 数字错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker can exploit the vulnerability to cause a denial of service via specially crafted image files...

CVE-2021-37616

Summary: CVE-2021-37616 is a null pointer dereference in Exiv2 up to version 0.27.4, triggered when printing interpreted/translated metadata (requires -p t or -P t). This can lead to a denial of service if a user runs Exiv2 on a crafted image file. The issue affects Exiv2 0.27.4 and earlier and h...

CVE-2021-37618

Exiv2 vulnerability CVE-2021-37618 affects the Exiv2 library and command-line tool up to version 0.27.4. The issue is an out-of-bounds read occurring when printing the image ICC profile (triggered with -p C), which could lead to a denial of service if a crafted image is processed. The root cause ...

CVE-2021-34335: Divide By Zero

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

CVE-2021-37618: Out-of-bounds Read

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

CVE-2021-37619: Out-of-bounds Read

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

PT-2021-6516

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description The issue is related to a lack of division by zero check in the Exiv2 library, which can cause a denial of service when a specially crafted image file is used. An attacker could exploit this to...

PT-2021-7927

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description A null pointer dereference was found in Exiv2, which can be triggered when printing the metadata of a crafted image file. This can potentially be exploited by an attacker to cause a denial of...

CVE-2021-37620

Exiv2 (the command-line utility and C++ library) has an out-of-bounds read vulnerability in versions ≤ 0.27.4 when reading metadata from crafted images, which could lead to denial of service. The issue is fixed in version 0.27.5. Affected users should upgrade to 0.27.5 or later to remediate. The ...

PT-2021-7924

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description A null pointer dereference was found in Exiv2, which can be triggered when printing the metadata of a crafted image file. This can potentially be exploited by an attacker to cause a denial of...