3 matches found
exiv2: denial of service in PngImage::readMetadata
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction...
6.5CVSS5.9AI score0.01579EPSS
SaveExploits1References4
ALPINE-CVE-2019-13108
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset...
6.5CVSS7AI score0.01427EPSS
SaveExploits1References1
CVE-2019-13109
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction...
6.5CVSS5.6AI score0.01579EPSS
SaveExploits1References5
20