UBUNTU-CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

UBUNTU-CVE-2023-49463

libheif v1.17.5 was discovered to contain a segmentation violation via the function findexiftag at /libheif/exif.cc...

libheif Security Vulnerabilities

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version v1.17.5, which stems from the discovery of a contained segmentation violation via the function findexiftag in /libheif/exif.cc...

PT-2023-8960

Name of the Vulnerable Software and Affected Versions libheif version 1.17.5 Description The issue is related to a segmentation error in the find exif tag function of the libheif decoder and encoder for file formats. Exploitation of this issue could allow a remote attacker to impact the...

libheif Security Vulnerabilities

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif version v1.17.5, which stems from the discovery of a contained segmentation conflict via the component /libheif/exif.cc...

CVE-2023-49462

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc...

PT-2023-8966 · Libheif +3 · Libheif +3

Name of the Vulnerable Software and Affected Versions: libheif version 1.17.5 Description: The issue is related to a segmentation error in the /libheif/exif.cc component of the libheif decoder and encoder for file formats. Exploitation of this issue could allow a remote attacker to impact the...

The vulnerability of the `add_exif_item_to_spec` function in the `src/libOpenImageIO/exif.cpp` component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the addexifitemtospec function in the src/libOpenImageIO/exif.cpp component of the OpenImageIO image processing library is related to the return of a stack variable address. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise...

Out-of-bounds Write

libexiv2.so is vulnerable to Out-of-bounds Write. The vulnerability exists because of an integer overflow in the brotliUncompress function within bmffimage.cpp. This flaw enables an attacker to manipulate and potentially read, write, delete, or modify image metadata such as Exif, IPTC, XMP, and I...

Exiv2 Buffer Error Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata from the individual developer Andreas Huggel. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer error vulnerability exists in...

Sensitive Data Exposure

answerdev/answer is vulnerable to Sensitive Data Exposure. The vulnerability is due to not sanitizing EXIF Exchangeable Image File Format image while uploading the image in profile or comment section.This can lead to attacker extract EXIF metadata containing Geolocation and many other image...

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service DoS. The vulnerability exists when stripping EXIF data from specific images, leading to high CPU usage and an application crash...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

auto-cve-2022-44268 Automating expl...

Ubuntu: Security Advisory (USN-6113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6113-1 Jhead vulnerability

It was discovered that Jhead did not properly handle certain crafted images while processing the Exif markers. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service...

USN-6113-1: Jhead vulnerability

It was discovered that Jhead did not properly handle certain crafted images while processing the Exif markers. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service...

USN-6108-1: Jhead vulnerabilities

It was discovered that Jhead did not properly handle certain crafted images while rotating them. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. CVE-2021-34055 Kyle Brown discovered that Jhead did not properly handle certain crafted images while...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Jhead vulnerabilities (USN-6098-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6098-1 advisory. It was discovered that Jhead did not properly handle certain crafted images while processing the JFIF markers. An attacker could...

Information Disclosure

github.com/answerdev/answer is vulnerable to Information Disclosure. The vulnerability exists due to improper validation in the filePath attribute in the uploadFile function of upload.go, which allows an attacker to access the uploaded image and extract the EXIF data...

Information Disclosure

github.com/answerdev/answer is vulnerable to Information Disclosure. The vulnerability exists because of uninitialized memory exposure in the upload.go file, which allows an attacker to access the uploaded image and extract the EXIF data...