OSV-2022-945 Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51707 Crash type: Heap-buffer-overflow WRITE Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::userDataDecoder...

PT-2022-37302 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include the crash type being a heap-buffer-overflow WRITE and the crash state involving functions such ...

RHEL 8 : exiv2 (RHSA-2021:3232)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3232 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...

RHEL 8 : compat-exiv2-026 (RHSA-2021:3230)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3230 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...

OSV-2022-830 Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50901 Crash type: Heap-buffer-overflow WRITE 8 Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::tagDecoder...

PT-2022-37242 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap-buffer-overflow error. Technical details about the error include the crash type being a Heap-buffer-overflow WRITE 8. The crash state involves functions such as...

OSV-2022-794 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50629 Crash type: Heap-buffer-overflow READ 5 Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::previewTagDecoder Exiv2::QuickTimeVideo::tagDecoder...

PT-2022-5399 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to the function BmffImage::boxHandler of the file bmffimage.cpp in the Exiv2 library and command-line utility for managing image metadata. It is associated with a buffer...

CVE-2021-37622 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37622 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37620 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37620 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37618 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37618 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37615 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37615 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-32617 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-32617 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29623 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-29623 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29463 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-29463 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29457 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-29457 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-20421 affecting package exiv2 for versions less than 0.27.5-1

CVE-2019-20421 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37623 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37623 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-37621 affecting package exiv2 for versions less than 0.27.5-1

CVE-2021-37621 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...