Lucene search
+L

6 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•21 views

Astra Linux – Vulnerability in exiv2

An invalid memory address dereferencing was discovered in the Exiv2::StringValueBase::read method in value.cpp of Exiv2 0.26. This vulnerability causes a segmentation fault and results in the application crashing, leading to a denial of service...

5.5CVSS6.5AI score0.01071EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2021/08/31 11:37 a.m.•10 views

exiv2:fuzz-read-print-write: Heap-buffer-overflow in Exiv2::StringValueBase::read

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=5671177327083520 Project: exiv2 Fuzzing Engine: afl Fuzz Target: fuzz-read-print-write Job Type: aflasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b0000002b6 Cra...

5.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/03/21 12:00 a.m.•24 views

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2::StringValueBase::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.6AI score0.01071EPSS
SaveExploits1References9Affected Software5
Veracode
Veracode
•added 2018/06/01 4:53 a.m.•48 views

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory address dereference attacks. The vulnerability exists in Exiv2::StringValueBase::read of value.cpp while parsing an image with malicious exif values, causing a denial of service DoS attack...

5.5CVSS6.1AI score0.01071EPSS
SaveExploits1References6Affected Software2
Mend
Mend
•added 2017/09/28 12:00 a.m.•5 views

CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

6.8CVSS0.01071EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2017/09/23 12:00 a.m.•4 views

PT-2017-4064

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid memory address dereference in the Exiv2::StringValueBase::read function in value.cpp of the Exiv2 library. This can cause a segmentation fault and application crash, leading to...

5.5CVSS0.01071EPSS
SaveExploits1References75
Rows per page
Query Builder