libraw:libraw_nef_fuzzer: Crash in LibRaw::sget4

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4516421182029824 Project: libraw Fuzzing Engine: honggfuzz Fuzz Target: librawneffuzzer Job Type: honggfuzzasanlibraw Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1343c777fd Crash...

K48355112: PHP vulnerability CVE-2018-10549

Security Advisory Description An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exifreaddata in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exifiifaddvalue mishandles the case of a MakerNote that lacks a fin...

SUSE CVE-2018-10549

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exifreaddata in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exifiifaddvalue mishandles the case of a MakerNote that lacks a final '\0' character...

SUSE CVE-2020-13112

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093...

SUSE CVE-2020-13114

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...

SUSE CVE-2020-13113

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

RLSA-2022:1842 Moderate: exiv2 security, bug fix, and enhancement update

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. The following packages have been upgraded to ...

PHP exif_process_ifd_in_makernote Buffer Overflow DoS

The vulnerability of the exifprocessifdinmakernote function ext/exif/exif.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to cause service failures, disclose sensitive information, or potentially have other adverse effect...

jhead security vulnerabilities

jhead is a tool for modifying information in JPEG files. A security vulnerability exists in makernote.c in jhead versions 3.04 and 3.05. No information about the vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-28276

CVE-2021-28276 affects jhead 3.04 and 3.05; DoS via a wild address read in ProcessCanonMakerNoteDir (makernote.c). Impact: availability degradation. Mitigation: upgrade to jhead 3.06+ (per GLSA/Ubuntu advisories). No exploitation details provided in the sources; no further specifics beyond the ci...

freeimage:load_from_memory_fuzzer: Crash in LibRaw::sget2

Detailed Report: https://oss-fuzz.com/testcase?key=5420664916410368 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f35103ec7fe Crash State: LibRaw::sget2...

libexif:exif_from_data_fuzzer: Crash in exif_mnote_data_apple_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4577720328126464 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61110000009c...

imagemagick:ping_dng_fuzzer: Crash in libraw_memmgr::malloc

Detailed Report: https://oss-fuzz.com/testcase?key=4562531275374592 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf0d00000 Crash State: librawmemmgr::malloc LibRaw::mall...

libexif:exif_loader_fuzzer: Crash in exif_mnote_data_apple_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4900628550778880 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6311000007ff Cra...

libexif:exif_loader_fuzzer: Heap-buffer-overflow in exif_mnote_data_apple_identify

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4532703432146944 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

OESA-2021-1286 libexif security update

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags. Security Fixes: An issue was discovered in libexif before 0.6.22. Use of uninitialized memor...

libraw:libraw_fuzzer: Use-of-uninitialized-value in saneSonyCameraInfo

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5453409617575936 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libexif Multiple Vulnerabilities (NS-SA-2021-0036)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libexif packages installed that are affected by multiple vulnerabilities: - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media...

libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...