SUSE CVE-2017-12955

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...

SUSE CVE-2017-12956

There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. A malicious user can pass an image file to the Exiv2::FileIo::pathabi:cxx11 function in basicio.cpp to cause an illegal address access that can crash the application...

CVE-2018-12265

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp...

CVE-2018-12265

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp...

Exiv2 Heap Buffer Overflow Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A heap buffer overflow vulnerability exists in the...

PYSEC-2017-127

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...

PYSEC-2017-128

There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...

CVE-2017-12955

CVE-2017-12955: Exiv2 0.26 has a heap-based buffer overflow in basicio.cpp (Image::printIFDStructure) causing an out-of-bounds write that can lead to remote denial of service or other impact. Connected sources (OpenVAS/SUSE entries) corroborate the Exiv2 exposure and reference CVE-2017-12955 amon...

CVE-2017-12956

CVE-2017-12956 is an Exiv2/ libexiv2 vulnerability (Exiv2 0.26) caused by illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp, leading to remote denial of service. Public records in vendor advisories and Nessus/OpenVAS notes confirm this issue as part of Exiv2 0.26 vulnerabiliti...

CVE-2017-12955

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...