Exiv2 LoaderTiff Code Execution

The vulnerability of the LoaderTiff::getData function preview.cpp in the Exiv2 media metadata management library is exploited by reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ALPINE-CVE-2019-17544

libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...

UBUNTU-CVE-2019-17544

libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...

exiv2: integer overflow in getData function in preview.cpp

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

CVE-2019-10878: Out-of-bounds Write

In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData and CDataFileReader::ReplaceData and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution...

PT-2019-12071

Name of the Vulnerable Software and Affected Versions Teeworlds version 0.7.2 Description The issue is related to a failed bounds check in certain functions within the engine/shared/datafile.cpp file, specifically in CDataFileReader::GetData and CDataFileReader::ReplaceData, which can lead to an...

Exiv2 getData Code Execution

The vulnerability of the getData function in the Exiv2 media metadata management library is related to buffer overflow. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using a specially created malicious file...

EulerOS 2.0 SP2 : exiv2 (EulerOS-SA-2018-1286)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. The attacker can trigger the attacker by sending a malicious LoaderTiff::getData in preview.cpp, causing an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

Exiv2 Integer Overflow Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. An integer overflow vulnerability exists in the...

CVE-2018-12264

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

Integer overflow

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

CVE-2018-12264

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

CVE-2018-12264

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

CVE-2018-12264

Exiv2 0.26 contains an integer overflow in LoaderTiff::getData() (preview.cpp), leading to an out-of-bounds read in Exiv2::ValueType::setDataArea (value.hpp). Exploitation could cause crashes or memory corruption. The vulnerability is addressed in later Exiv2 revisions (e.g., upgrade to the 0.27....

PT-2018-3153

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by integer overflows in the LoaderTiff::getData function in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. This can allow a remote attacker to...

CVE-2018-12264: Out-of-bounds Read

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

PT-2018-19188

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to integer overflows in the LoaderTiff::getData function, which can lead to an out-of-bounds read in the Exiv2::ValueType::setDataArea function. Recommendations For Exiv2 version 0.26, consid...

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflows. A malicious user can pass a jpg file to the LoaderTiff::getData function in preview.cpp to cause a buffer overflow that can crash the application or execute arbitrary code...