CVE-2021-37621

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

CVE-2021-32815

CVE-2021-32815 affects Exiv2 (command-line and library) where an assertion failure occurs when modifying metadata of a crafted image file. This could allow a denial of service if a victim runs Exiv2 on a crafted image. The issue is triggered specifically by metadata modification and not by readin...

CVE-2021-34335

Exiv2 v0.27.4 and earlier have a denial-of-service risk caused by a floating-point exception (divide-by-zero) when printing translated metadata (requires -p t). The issue triggers on crafted image files and can be exploited to crash Exiv2, not a general compromise. The vulnerability is fixed in v...

PT-2021-7928 · Exiv2 +5 · Exiv2 +5

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: The issue is related to an infinite loop in the Exiv2 library, which can be triggered when modifying the metadata of a crafted image file. This can potentially allow an attacker to cause a denia...

CVE-2021-37621

CVE-2021-37621 affects Exiv2 up to v0.27.4; an infinite loop is triggered when printing the ICC profile (requires -p C), potentially causing denial of service. The issue is fixed in v0.27.5; upgrading Exiv2 to 0.27.5+ is recommended per provided advisories.

CVE-2021-37618

Exiv2 vulnerability CVE-2021-37618 affects the Exiv2 library and command-line tool up to version 0.27.4. The issue is an out-of-bounds read occurring when printing the image ICC profile (triggered with -p C), which could lead to a denial of service if a crafted image is processed. The root cause ...

CVE-2021-37616

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

CVE-2021-37618

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

CVE-2021-37619

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

Exiv2 安全漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an assertion failure. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

CVE-2021-37615 Null pointer dereference in Exiv2::Internal::resolveLens0x319

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

CVE-2021-32815 Denial of service due to assertion failure in crwimage_int.cpp

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

CVE-2021-37621 Denial of service due to infinite loop in Image::printIFDStructure

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

CVE-2021-32815 Denial of service due to assertion failure in crwimage_int.cpp

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

CVE-2021-34335 Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

PT-2021-6516 · Exiv2 +4 · Exiv2 +4

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: The issue is related to a lack of division by zero check in the Exiv2 library, which can cause a denial of service when a specially crafted image file is used. An attacker could exploit this to...

PT-2021-7927 · Exiv2 +4 · Exiv2 +4

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: A null pointer dereference was found in Exiv2, which can be triggered when printing the metadata of a crafted image file. This can potentially be exploited by an attacker to cause a denial of...

CVE-2021-37616

Summary: CVE-2021-37616 is a null pointer dereference in Exiv2 up to version 0.27.4, triggered when printing interpreted/translated metadata (requires -p t or -P t). This can lead to a denial of service if a user runs Exiv2 on a crafted image file. The issue affects Exiv2 0.27.4 and earlier and h...

CVE-2021-37615

Exiv2 (image metadata library) had a null pointer dereference in versions up to 0.27.4 when printing the interpreted metadata of a crafted image file (requires -p t or -P t). This could allow a denial-of-service condition if an attacker tricks a user into processing a crafted image. The issue is ...

Exiv2 安全漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an infinite loop. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...