SUSE CVE-2017-14860

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata

...

PT-2021-7699

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description The issue is related to an infinite loop in the Exiv2 library, which can be triggered when printing the metadata of a specially crafted image file, potentially allowing a remote attacker to cause ...

AZL-7212 CVE-2021-29623 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying...

PT-2019-5329

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.27.2 Description The issue is related to an uncontrolled memory allocation in the PngChunk::parseChunkContent function of the Exiv2 library, which can be exploited by an attacker to cause a denial of service via a...

DEBIAN-CVE-2019-9143

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

Exiv2 BigTiffImage::printIFD single-byte overflow vulnerability

Exiv2 is a C++ class library for extracting EXIF, LPTC and XMP metadata information from images. A single-byte overflow security vulnerability exists in Exiv2 version 0.26 bigtiffimage.cpp/BigTiffImage::printIFD, which can be exploited by an attacker to cause a denial of service...

PYSEC-2017-116

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

PYSEC-2015-36

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service crash via a long IKEY INFO tag value in an AVI file...