The vulnerability of the BmffImage::brotliUncompress() function in the Exiv2 library and command-line utilities for managing image metadata allows a hacker to execute arbitrary code.

The vulnerability of the BmffImage::brotliUncompress function in the Exiv2 library and command-line utilities for managing image metadata involves an escape from the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-44398

An out-of-bounds write vulnerability has been identified in the Exiv2 library within the BmffImage::brotliUncompress function. This issue arises when Exiv2 is employed to extract metadata from a manipulated image file. An attacker could potentially exploit the vulnerability to gain code execution...

Design/Logic Flaw

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, BmffImage::brotliUncompress, is new in v0.28.0, so earlier versions of Exiv2 are not...

PYSEC-2023-233

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, BmffImage::brotliUncompress, is new in v0.28.0, so earlier versions of Exiv2 are not...

CVE-2023-44398 Out-of-bounds write in exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, BmffImage::brotliUncompress, is new in v0.28.0, so earlier versions of Exiv2 are not...

The vulnerability in the BmffImage::boxHandler function of the bmffimage.cpp file in the library and command-line utilities for managing image metadata in Exiv2 allows a attacker to perform a denial-of-service attack.

The vulnerability of the BmffImage::boxHandler function in the bmffimage.cpp file of the Exiv2 image metadata management command-line utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to trigger a...

CVE-2022-3717

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2022-5399 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to the function BmffImage::boxHandler of the file bmffimage.cpp in the Exiv2 library and command-line utility for managing image metadata. It is associated with a buffer...