CVE-2017-14861

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

Stack overflow

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PYSEC-2017-131

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

PYSEC-2017-138

There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14865

There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14866

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14860

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14860

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14858

CVE-2017-14858 affects Exiv2 up to version 0.26, where a heap-based buffer overflow in Exiv2::l2Data (types.cpp) can cause a denial of service when fed crafted input. Public details in connected docs confirm the DoS impact; patched versions exist, with PT-security entries stating fixes in (and af...

CVE-2017-14858

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14858

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14861

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-14857

Exiv2 0.26 contains an invalid free in Image::printIFDStructure (image.cpp) causing a segmentation fault that can lead to denial of service. Public advisories (Mageia/ENISA OSV) confirm this CVE-2017-14857 issue and note that fixes were delivered in newer Exiv2 packages (e.g., MGA6 patch) and adv...

CVE-2017-14863

CVE-2017-14863 corresponds to a NULL pointer dereference in Exiv2 0.26 (Exiv2::Image::printIFDStructure in image.cpp) that can cause a segmentation fault and denial of service. Connected sources confirm Exiv2/0.26 as affected and indicate fixes in later Exiv2 releases (e.g., 0.27.2+; some advisor...

CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14860

CVE-2017-14860 affects Exiv2 0.26, with a heap-based buffer over-read in Exiv2::Jp2Image::readMetadata (jp2image.cpp) that can lead to a denial of service. Public/documented details reference Exiv2 0.26 and a fix later (e.g., in 0.27.x line), with SUSE/openSUSE notes indicating the issue was addr...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...