CVE-2017-11338: Loop with Unreachable Exit Condition

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

Exiv2 'Image::printIFDStructure' heap buffer overflow vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. The Image::printIFDStructure function in Exiv2's image.cpp suffers from a heap buffer overflow that allows an attacker to conduct a remote denial-of-service attack with specially designed inputs...

CVE-2017-11339: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

PT-2017-19358

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer overflow exists in the Image::printIFDStructure function of image.cpp. This issue can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendations...

PT-2017-19357

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp. A crafted input can cause a remote denial of service attack. Recommendations For Exiv2 version 0.26, consider...

Exiv2 'XmpParser::terminate()' Denial of Service Vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'XmpParser::terminate' function in Exiv2 version 0.26. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error with the help ...

CVE-2017-11340: Improper Input Validation

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11336: Out-of-bounds Read

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

PT-2017-19359

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a Segmentation fault in the XmpParser::terminate function, which can be triggered by a crafted input, leading to a remote denial of service attack. Recommendations For Exiv2 version 0.26,...

PT-2017-19356

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid free in the Action::TaskFactory::cleanup function of actions.cpp. A crafted input can lead to a remote denial of service attack. Recommendations For Exiv2 version 0.26, at the...

CVE-2017-11337: Use After Free

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

PT-2017-19355

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer over-read issue exists in the Image::printIFDStructure function in image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11336

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11337

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11338

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11339

CVE-2017-11339 : Exiv2 0.26 contains a heap-based buffer overflow in the Image::printIFDStructure function (image.cpp) triggered by crafted input, leading to remote denial of service. Multiple open advisories (e.g., openSUSE/SUSE updates) fix this by upgrading to Exiv2 0.26 or applying patches. T...

CVE-2017-11336

There is a confirmed vulnerability in Exiv2 0.26: a heap-based buffer over-read in Image::printIFDStructure (image.cpp) can be triggered by crafted input, leading to remote denial of service. The CVE-2017-11336 entry is supported by multiple sources in the connected set, which describe the affect...

CVE-2017-11337

CVE-2017-11337 is an Exiv2 0.26 vulnerability: an invalid free in Action::TaskFactory::cleanup (actions.cpp) can be triggered by crafted input to cause a remote denial of service. Public records in the initial document describe the flaw, and connected advisories/plugins (e.g., openSUSE/SUSE NSS, ...

CVE-2017-11340

CVE-2017-11340 affects Exiv2 0.26 where the Segmentation fault occurs in XmpParser::terminate() due to an exit-related issue. A crafted input can trigger a remote denial of service. Public details in the provided documents confirm the vulnerability surface in Exiv2 0.26; other connected items ind...