Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. The attacker can trigger the attacker by sending a malicious LoaderTiff::getData in preview.cpp, causing an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

Exiv2 Integer Overflow Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. An integer overflow vulnerability exists in the...

CVE-2018-12264

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

Buffer Overflow

libexiv2.so is vulnerable to buffer overflows. A malicious user can pass a jpg file to the LoaderTiff::getData function in preview.cpp to cause a buffer overflow that can crash the application or execute arbitrary code...