Linux Distros Unpatched Vulnerability : CVE-2021-34334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when...

CVE-2024-24826 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are no...

CVE-2021-37621

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

Exiv2 out-of-bounds read vulnerability (CNVD-2021-31911)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.3 and earlier versions. An attacker can exploit this vulnerability to cause Exiv2 to crash via specially crafted image files...

PT-2019-20120

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27 Description An issue in Exiv2 allows an attacker to cause Denial of Service or possibly have other unspecified impact by triggering infinite recursion with a crafted file. This recursion occurs at...

CVE-2019-9143: Uncontrolled Recursion

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

PT-2019-19387

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27 Description A problem has been discovered that allows an attacker to cause a Denial of Service or possibly have other unspecified impacts. This issue is triggered by a crafted file, leading to infinite recursion at...

CVE-2018-18915

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

Input validation

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

CVE-2018-18915

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

CVE-2018-18915: Loop with Unreachable Exit Condition

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

Denial Of Service (DoS) Through Heap Buffer Overflow

libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in basicio.cpp which causes an out-of-bounds write in Exiv2::Image::printIFDStructure and leads to a DoS attack, and possibly other attacks...

CVE-2018-10780

Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...

PT-2018-19182

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap2 function located in image.cpp. Recommendations For Exiv2 version 0.26, at the moment, there is no information about a newer...

PT-2018-10106

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap2 function located in image.cpp. Recommendations For Exiv2 version 0.26, at the moment, there is no information about a newer...

CVE-2018-10780: Out-of-bounds Read

Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...

CVE-2017-17723

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file...

PT-2018-19180

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function. This can be exploited by remote attackers using a crafted TIFF file, potentially leading to memory data disclosure or...

PT-2018-6555

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function, which can be exploited by remote attackers using a crafted TIFF file. This can lead to the disclosure of memory dat...

PT-2018-19201

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function, located in the image.cpp file. This can be exploited by remote attackers to cause a denial of service using a crafted...