2691 matches found
PYSEC-2017-115
exiv2 0.26 contains a Stack out of bounds read in webp parser...
CVE-2017-1000128
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...
CVE-2017-1000127
CVE-2017-1000127 : Exiv2 0.26 contains a heap-based buffer overflow in the TIFF parser. The connected PTSecurity entries indicate the vulnerability is addressed by upgrading Exiv2 to 0.27.2 or later. Public details in the provided docs confirm the issue is tied to the TIFF parser in Exiv2 0.26; n...
CVE-2017-1000128
CVE-2017-1000128 affects Exiv2 up to version 0.26, reporting a stack out-of-bounds read in the JPEG2000 parser. Public details in connected docs confirm the issue and its remediation: updated to Exiv2 0.27.5 fixes the vulnerability. SUSE advisory SUSE-SU-2022:3889-1 and OSV notes list CVE-2017-10...
CVE-2017-1000126
CVE-2017-1000126 affects exiv2 0.26 with a Stack out-of-bounds read in the WebP parser. Public advisories (openSUSE, Red Hat/Nessus plugins) confirm Exiv2 0.26 as vulnerable. The issue is fixed in newer exiv2 releases (openSUSE/SLE updates reference the 0.26 line being updated to address this). I...
CVE-2017-1000126
exiv2 0.26 contains a Stack out of bounds read in webp parser...
CVE-2017-1000128
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser...
CVE-2017-1000127
Exiv2 0.26 contains a heap buffer overflow in tiff parser...
CVE-2017-1000126
exiv2 0.26 contains a Stack out of bounds read in webp parser...
CVE-2017-1000127
Exiv2 0.26 contains a heap buffer overflow in tiff parser...
MGASA-2017-0391 Updated exiv2 packages fix security vulnerabilities & bugs
Opening an image created on certain pentax cameras with gwenview, which uses the exiv2 library, causes gwenview to segfault. Exiv2 upstream created a patch to resolve this problem bugfix - applies only to mga6. The following security issues were also fixed: Heap overflow in...
Updated exiv2 packages fix security vulnerabilities & bugs
Opening an image created on certain pentax cameras with gwenview, which uses the exiv2 library, causes gwenview to segfault. Exiv2 upstream created a patch to resolve this problem bugfix - applies only to mga6. The following security issues were also fixed: Heap overflow in...
Debian DLA-1147-1 : exiv2 security update
The exiv2 library is vulnerable to multiple issues that can all lead to denial of service of the applications relying on the library to parse images' metadata. CVE-2017-11591 Denial of service via floating point exception in the Exiv2::ValueType function. CVE-2017-11683 Denial of service through...
[SECURITY] [DLA 1147-1] exiv2 security update
Package : exiv2 Version : 0.23-1+deb7u2 CVE ID : CVE-2017-11591 CVE-2017-11683 CVE-2017-14859 CVE-2017-14862 CVE-2017-14864 Debian Bug : 876893 The exiv2 library is vulnerable to multiple issues that can all lead to denial of service of the applications relying on the library to parse images...
DLA-1147-1 exiv2 - security update
Bulletin has no description...
CVE-2017-14859
An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
CVE-2017-14858
There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...
CVE-2017-14866
There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...
CVE-2017-14864
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...