35 matches found
CVE-2024-25112 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...
PT-2024-20754
Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.28.0 through v0.28.1 Description Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2, caused by an unbounded...
OSV-2023-1161 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64151 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::NikonTagsDecoder Exiv2::QuickTimeVideo::userDataDecoder...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service.The vulnerability exists in QuickTimeVideo::multipleEntriesDecoder function of quicktimevideo.cpp due to an infinite loop in the Quicktime Video Handler which allows an attacker to crash the application via malicious input...
The vulnerability in the `QuickTimeVideo::decodeBlock` function of the `quicktimevideo.cpp` file in the library and command-line utilities for managing image metadata from Exiv2 allows a hacker to execute arbitrary code.
The vulnerability in the QuickTimeVideo::decodeBlock function of the quicktimevideo.cpp file in the library and command-line utilities for managing image metadata with Exiv2 is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remo...
The vulnerability in the `QuickTimeVideo::userDataDecoder` function of the `quicktimevideo.cpp` file in the library and command-line utilities for managing image metadata from Exiv2 allows a hacker to cause a service failure.
The vulnerability of the QuickTimeVideo::userDataDecoder function in the quicktimevideo.cpp file of the Exiv2 image metadata management library and command-line utility is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to perform a...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in the QuickTimeVideo::userDataDecoder function of quicktimevideo.cpp causing an application crash...
Buffer Overflow
libexiv2.so is vulnerable to buffer overflow. The vulnerability exists in the QuickTimeVideo::userDataDecoder function in quicktimevideo.cpp where the resulting value will always be larger than the original value allowing an attacker to cause an application crash through an integer overflow by...
CVE-2022-3757
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
OSV-2022-1011 Heap-buffer-overflow in Exiv2::MemIo::read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52053 Crash type: Heap-buffer-overflow WRITE Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::userDataDecoder...
OSV-2022-999 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51972 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::userDataDecoder Exiv2::QuickTimeVideo::tagDecoder...
PT-2022-37328 · Exiv2 · Exiv2
Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: A heap-buffer-overflow read issue has been identified. The crash occurs in the Exiv2::QuickTimeVideo::userDataDecoder and Exiv2::QuickTimeVideo::tagDecoder functions. Recommendations: At the...
OSV-2022-945 Heap-buffer-overflow in Exiv2::MemIo::read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51707 Crash type: Heap-buffer-overflow WRITE Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::userDataDecoder...
OSV-2022-794 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50629 Crash type: Heap-buffer-overflow READ 5 Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::previewTagDecoder Exiv2::QuickTimeVideo::tagDecoder...
