RHEL 8 : compat-exiv2-026 (RHSA-2021:3230)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3230 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...

RHEL 8 : exiv2 (RHSA-2021:3232)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3232 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...

OSV-2022-830 Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50901 Crash type: Heap-buffer-overflow WRITE 8 Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::tagDecoder...

PT-2022-37242 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap-buffer-overflow error. Technical details about the error include the crash type being a Heap-buffer-overflow WRITE 8. The crash state involves functions such as...

exiv2:fuzz-read-print-write: Heap-buffer-overflow in Exiv2::MemIo::read

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=5744443654799360 Project: exiv2 Fuzzing Engine: honggfuzz Fuzz Target: fuzz-read-print-write Job Type: honggfuzzasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

OSV-2022-794 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50629 Crash type: Heap-buffer-overflow READ 5 Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::previewTagDecoder Exiv2::QuickTimeVideo::tagDecoder...

exiv2:fuzz-read-print-write: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=6752421547737088 Project: exiv2 Fuzzing Engine: libFuzzer Fuzz Target: fuzz-read-print-write Job Type: libfuzzerasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

PT-2022-5399 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to the function BmffImage::boxHandler of the file bmffimage.cpp in the Exiv2 library and command-line utility for managing image metadata. It is associated with a buffer...

CVE-2021-37620 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37620 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-34334 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-34334 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37618 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37618 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1

CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-20421 affecting package exiv2 for versions less than 0.27.5-1

CVE-2019-20421 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-3482 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-3482 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-32617 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-32617 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29464 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-29464 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37622 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37622 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37615 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37615 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-34335 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-34335 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...