Lucene search
+L

2693 matches found

CVE
CVE
added 2021/04/30 12:00 a.m.225 views

CVE-2021-29463

Exiv2 vulnerability CVE-2021-29463 is an out-of-bounds read in Exiv2 before 0.27.4 that is triggered when writing metadata to crafted images, potentially causing a denial of service by crashing the tool. The issue is specific to the write-metadata path (e.g., with insert) and does not affect read...

5.5CVSS5.2AI score0.01119EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:00 a.m.38 views

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2021-1782)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.CVE-2018-11531 - Exiv2 0.27.2 allows attackers to trigger a crash in...

9.8CVSS6.8AI score0.03121EPSS
SaveExploits2References4
AlpineLinux
AlpineLinux
added 2021/04/30 12:00 a.m.71 views

CVE-2021-29464

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An...

7.8CVSS6.2AI score0.01499EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/04/30 12:00 a.m.36 views

CVE-2021-29463 Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

3.3CVSS6.3AI score0.01119EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/04/30 12:00 a.m.31 views

CVE-2021-29463

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

5.5CVSS4.9AI score0.01119EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/04/30 12:00 a.m.53 views

CVE-2021-29463

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

5.5CVSS5.5AI score0.01119EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2021/04/30 12:00 a.m.32 views

CVE-2021-29463 Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

3.3CVSS6.8AI score0.01119EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/04/30 12:00 a.m.30 views

CVE-2021-29464

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An...

7.8CVSS7.7AI score0.01499EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/04/30 12:00 a.m.4 views

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in Exiv2 0.27.3 and earlier versions. An attacker could exploit this vulnerability to achieve code execution via specially crafted image files...

7.8CVSS6.5AI score0.01499EPSS
SaveExploits0References10
CVE
CVE
added 2021/04/30 12:00 a.m.200 views

CVE-2021-29464

CVE-2021-29464 affects Exiv2 before 0.27.4 with a heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header (triggered when writing metadata to a crafted image). Impact: potential code execution on crafted images; attack requires user to run Exiv2 on such an image (e.g., via insert argument). Fixe...

7.8CVSS6AI score0.01499EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2021/04/27 2:15 p.m.28 views

CVE-2021-29473

A flaw was found in exiv2. An out-of-bounds read in the Exiv2::Jp2Image::doWriteMetadata function may allow a remote attacker to crash an application using exiv2 library. The highest threat from this vulnerability is to application availability...

7.5CVSS3AI score0.01677EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/04/27 12:00 a.m.21 views

Exiv2 out-of-bounds read vulnerability (CNVD-2021-31753)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.3 and earlier versions. An attacker can exploit this vulnerability to cause Exiv2 to crash via specially crafted image files...

2.6CVSS6.5AI score0.01677EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 7:15 p.m.8 views

AZL-7211 CVE-2021-29473 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

2.5CVSS6.6AI score0.01677EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/26 7:15 p.m.23 views

CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

2.6CVSS0.01677EPSS
SaveExploits0References10
OSV
OSV
added 2021/04/26 7:15 p.m.24 views

CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

2.5CVSS6.3AI score
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2021/04/26 7:15 p.m.31 views

CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

2.6CVSS6.8AI score0.01677EPSS
SaveExploits0References8
Prion
Prion
added 2021/04/26 7:15 p.m.22 views

Design/Logic Flaw

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

2.6CVSS4.9AI score0.01677EPSS
SaveExploits0References10Affected Software3
OSV
OSV
added 2021/04/26 7:15 p.m.6 views

UBUNTU-CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

2.5CVSS5.8AI score0.01677EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2021/04/26 5:52 p.m.40 views

CVE-2021-29470

A flaw was found in exiv2. An out-of-bounds read in the Exiv2::Jp2Image::encodeJp2Header function may allow a remote attacker to crash an application using exiv2 library. The highest threat from this vulnerability is to application availability...

7.5CVSS3AI score0.01571EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/04/26 12:00 a.m.6 views

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An out-of-bounds read vulnerability exists in Exiv2 0.27.3 and earlier versions. An attacker can exploit this vulnerability to cause Exiv2 to crash via specially crafted image files...

2.6CVSS5.7AI score0.01677EPSS
SaveExploits0References20
Rows per page
Query Builder