CVE-2025-28162

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer ASan, the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive...

EUVD-2021-34072

Malicious code in bioql PyPI...

Denial Of Service (DoS)

libexiv2.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the PngImage::printStructure function at pngimage.cpp due to a buffer overflow which allows an attacker to cause an application crash...

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

DEBIAN-CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

UBUNTU-CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

The vulnerability of the Exiv2::PngImage::readMetadata() function in the pngimage.cpp component of the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the Exiv2::PngImage::readMetadata function in the pngimage.cpp component of the Exiv2 metadata management library is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a...

SUSE CVE-2018-10772

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

SUSE CVE-2018-11037

In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file...

SUSE CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

SUSE CVE-2019-13109

An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction...

SUSE CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2021-4214

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service...

CVE-2021-4214

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service...

CVE-2021-4214

A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service...

CVE-2021-4214

CVE-2021-4214 describes a heap overflow in libpng’s pngimage.c. The flaw can be triggered by an attacker who has local network access and must supply a specially crafted PNG to the pngimage utility, causing an application crash and resulting in a denial of service. The vulnerability details speci...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists in PngImage::readMetadata function of pngimage.cpp due to negative integer overflow which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. An attacker can input a malicious PNG file to PngImage::readMetadata in pngimage.cpp to cause a heap-based buffer overflow which results in a denial of service condition...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...