Heap overflow

There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

PYSEC-2017-132

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Stack overflow

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

PYSEC-2017-133

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14866

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

PYSEC-2017-135

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2017-19367

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by an invalid free in the Image class in image.cpp, which results in a Segmentation fault. A crafted input can lead to a denial of service attack. Recommendations For Exiv2 version 0.26, at th...

PT-2017-19369

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A memory address dereference issue was found in the read function of Exiv2::StringValueBase in value.cpp, causing a segmentation fault and application crash. This results in a denial of service. Recommendations F...

PT-2017-19376

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer overflow exists in the Exiv2::s2Data function of types.cpp. This issue can be triggered by a crafted input, leading to a denial of service attack. Recommendations For Exiv2 version 0.26, at th...

PT-2017-19370

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp. A crafted input can lead to a denial of service attack. Recommendations For Exiv2 version 0.26,...

PT-2017-19373

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A NULL pointer dereference was discovered in the printIFDStructure function in image.cpp, which causes a segmentation fault and application crash, leading to denial of service. Recommendations For Exiv2 version...

PT-2017-19375

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer overflow exists in the Exiv2::us2Data function of types.cpp. This issue can be triggered by a crafted input, leading to a denial of service attack. Recommendations For Exiv2 version 0.26,...

PT-2017-19374

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A memory address dereference issue was found in Exiv2, specifically in the Exiv2::getULong function located in types.cpp. This issue leads to a segmentation fault, causing the application to crash and resulting i...

PT-2017-19368

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer overflow exists in the Exiv2::l2Data function of types.cpp, which can be triggered by a crafted input, leading to a denial of service attack. Recommendations For Exiv2 version 0.26, at the...

CVE-2017-14859: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14858: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14857: Use After Free

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14866: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14864: Improper Restriction of Operations within the Bounds of a Memory Buffer

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14861: Integer Overflow or Wraparound

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...