Lucene search
K

12 matches found

Cvelist
Cvelist
added 2026/06/10 9:25 p.m.30 views

CVE-2026-42326 ImageMagick: Heap Buffer Over-Read in IPTC encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 an...

5.1CVSS0.0012EPSS
Exploits0References1
Snyk
Snyk
added 2026/05/18 3:31 p.m.10 views

Integer Underflow (Wrap or Wraparound)

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.1CVSS5.8AI score0.0012EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-2032

Malware in sbrugna...

4.3CVSS6.4AI score0.01187EPSS
Exploits0References4
Fedora
Fedora
added 2021/05/04 1:1 a.m.49 views

[SECURITY] Fedora 34 Update: exiv2-0.27.3-6.fc34

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

7.8CVSS1.6AI score0.02295EPSS
Exploits2
RedHat Linux
RedHat Linux
added 2019/08/06 2:22 p.m.25 views

exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp

An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory...

6.5CVSS5.8AI score0.02172EPSS
Exploits1References4
Fedora
Fedora
added 2018/08/09 4:53 p.m.53 views

[SECURITY] Fedora 27 Update: exiv2-0.26-12.fc27

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

9.8CVSS1.6AI score0.0296EPSS
Exploits15
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.21 views

Fedora Update for exiv2 FEDORA-2007-4551

Check for the Version of exiv2 OpenVAS Vulnerability Test Fedora Update for exiv2 FEDORA-2007-4551 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.5CVSS7.5AI score0.04871EPSS
Exploits0References2
CVE
CVE
added 2006/01/31 11:0 a.m.37 views

CVE-2005-4676

The CVE-2005-4676 vulnerability is a buffer overflow in Exiv2 before 0.9 caused by not null-terminating strings before sscanf when parsing IPTC metadata, enabling remote attackers to crash the application via crafted images. Affected: Exiv2

5CVSS6.9AI score0.04004EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2006/01/31 11:0 a.m.16 views

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

6.8AI score0.04004EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2006/01/31 11:0 a.m.20 views

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

5CVSS6.6AI score0.04004EPSS
Exploits1
NVD
NVD
added 2005/12/31 5:0 a.m.16 views

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

5CVSS6.8AI score0.04004EPSS
Exploits1References6
OSV
OSV
added 2005/12/31 5:0 a.m.8 views

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

7.2AI score
Exploits0References8
Rows per page
Query Builder