PT-2018-12453

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to the misuse of the realpath function in the example code of Exiv2 on POSIX platforms, excluding Apple platforms where glibc is not used. This could potentially lead to a buffer overflow...

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

PYSEC-2018-133

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

PYSEC-2018-133

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

Heap overflow

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

CVE-2018-14046

CVE-2018-14046 : Exiv2 0.26 contains a heap-based buffer over-read in WebPImage::decodeChunks (webpimage.cpp). Multiple advisories (EulerOS/ALAS, Oracle/Linux, MiracleLinux, NewStart CGSL) reference this, with a fix upgrading to Exiv2 0.27.x. Remediate by updating to a version that includes the p...

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

CVE-2018-14046: Out-of-bounds Read

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

PT-2018-12300

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the WebPImage::decodeChunks function located in webpimage.cpp. This indicates a problem with how the Exiv2 library handles certain WebP image chunks,...

PT-2018-19190

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer over-read in the WebPImage::decodeChunks function located in webpimage.cpp. Recommendations For Exiv2 version 0.26, at the moment, there is no information about a newer version th...

Debian: Security Advisory (DLA-1402-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:1882-1 Security update for exiv2

This update for exiv2 to 0.26 fixes the following security issues: - CVE-2017-14864: Prevent invalid memory address dereference in Exiv2::getULong that could have caused a segmentation fault and application crash, which leads to denial of service bsc1060995. - CVE-2017-14862: Prevent invalid memo...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Exiv2 vulnerabilities (USN-3700-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3700-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this to cause a denial of service...

Debian DSA-4238-1 : exiv2 - security update

Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or the execution of arbitrary code if a malformed file is parsed. C Tenable Network Security, Inc. The descriptive text and package chec...

[SECURITY] [DSA 4238-1] exiv2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4238-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 03, 2018 https://www.debian.org/security/faq -...

USN-3700-1: Exiv2 vulnerabilities

It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. CVE-2018-10958, CVE-2018-10998 It was discovered that Exiv2 incorrectly handled certain PNG files. An attacker could possibly use this to access sensitive information...