CVE-2017-12955

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...

PT-2017-19365

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an illegal address access in the Exiv2::FileIo::pathabi:cxx11 function in the basicio.cpp file of libexiv2. This can lead to a remote denial of service. Recommendations For Exiv2 version...

PT-2017-19364

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer overflow in the basicio.cpp file, which causes an out-of-bounds write in the Exiv2::Image::printIFDStructure function. This may lead to a remote denial of service or possibly othe...

PT-2017-12799

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer overflow in the basicio.cpp file of Exiv2, which causes an out-of-bounds write in the printIFDStructure function. This may lead to a remote denial of service or possibly other...

CVE-2017-12955: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...

CVE-2017-12956: Out-of-bounds Read

There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...

CVE-2017-12957: Out-of-bounds Read

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service...

PT-2017-19366

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer over-read in libexiv2, triggered in the Exiv2::Image::io function in image.cpp, which can lead to a remote denial of service. Recommendations For Exiv2 version 0.26, at the moment...

PT-2017-12801

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer over-read in libexiv2, triggered in the Exiv2::Image::io function in image.cpp, which can lead to a remote denial of service. Recommendations For Exiv2 version 0.26, at the moment...

PT-2017-12800

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an illegal address access in the Exiv2::FileIo::pathabi:cxx11 function in basicio.cpp of libexiv2. This can lead to a remote denial of service. Recommendations For Exiv2 version 0.26, at t...

CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11591

There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11592

There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack heap memory corruption via crafted input...

PYSEC-2017-126

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

Authentication flaw

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

PYSEC-2017-126

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

DEBIAN-CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input...

CVE-2017-11683

The CVE-2017-11683 entry concerns Exiv2 0.26 with a reachable assertion in Internal::TiffReader::visitDirectory (tiffvisitor.cpp) that can enable a remote denial of service via crafted input. Connected sources confirm this is a real issue affecting Exiv2’s TIFF/metadata parsing path, not a local ...