CVE-2021-3482

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

CVE-2021-3482

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

PT-2021-4584 · Exiv2 +8 · Exiv2 +8

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.3 Description: The issue is related to an integer overflow in the CrwMap::encode0x1810 function of Exiv2, which can be exploited by attackers to trigger a heap-based buffer overflow, causing a denial of service DOS via...

PT-2021-4564 · Exiv2 +10 · Exiv2 +10

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.3 and earlier Description: A heap buffer overflow was found in Exiv2 when used to write metadata into a crafted image file. This could potentially allow an attacker to gain code execution if they can trick the victim into...

CVE-2021-3482

A flaw was found in Exiv2. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. The highest threat from this vulnerability is to confidentialit...

PT-2021-4547 · Exiv2 +9 · Exiv2 +9

Name of the Vulnerable Software and Affected Versions: Exiv2 versions prior to 0.27.4-RC1 Description: The issue is related to the Jp2Image::readMetadata function in the jp2image.cpp component of the Exiv2 library, which is used for managing media file metadata. The problem arises from improper...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 suffers from a heap buffer overflow vulnerability. The vulnerability stems from improper validation of input to the rawData.size property in Jp2Image::readMetadata in jp2image.cpp. An attacker could...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-1674)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-1674)

According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in...

The vulnerability of the Exiv2::getULong function in types.cpp of the Exiv2 metadata management library, which is related to the operation returning values within the allowable buffer size, allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::getULong function in the types.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the `Exiv2::IptcParser::decode` function of the `iptc.cpp` file in the media metadata management library Exiv2, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability in the Exiv2::IptcParser::decode function of the iptc.cpp file in the media metadata management library Exiv2 is related to incorrect processing of PSD files. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Jp2Image::readMetadata() function in the jp2image.cpp file of the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the Jp2Image::readMetadata function in the jp2image.cpp file of the Exiv2 media metadata management library is related to incorrect handling of the input file. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the `Exiv2::StringValueBase::read` function in the `value.cpp` library of the Exiv2 media metadata management library is related to the issue of allowing the operation to exit within acceptable buffer limits. This allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::StringValueBase::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the `Internal::TiffReader::visitDirectory` function in the `tiffvisitor.cpp` file of the Exiv2 media metadata management library, related to the insufficient use of the `assert()` function, allows a malicious actor to cause service failures.

The vulnerability of the Internal::TiffReader::visitDirectory function in the tiffvisitor.cpp file of the Exiv2 media metadata management library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

Vulnerability of the PngChunk::readRawProfile function in the pngchunk_int.cpp file of the Exiv2 media metadata management library, allowing a hacker to cause a service failure

The vulnerability of the PngChunk::readRawProfile function in the pngchunkint.cpp file of the Exiv2 media metadata management library is related to incorrect processing of PNG files. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2::DataValue::read function in the value.cpp library for managing Exiv2 media metadata allows a perpetrator to cause service failure.

The vulnerability of the Exiv2::DataValue::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2::ValueType function in the Exiv2 media file metadata management library allows a attacker to cause a service failure.

The vulnerability of the Exiv2::ValueType function in the Exiv2 metadata management library is related to incorrect exception handling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to infinite loop execution, allowing attackers to cause service interruptions.

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to improper processing of PSD files. Exploiting this vulnerability could allow an attacker to cause service failures...

EulerOS Virtualization 3.0.6.6 : exiv2 (EulerOS-SA-2021-1470)

According to the version of the exiv2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-1470)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...