56 matches found
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.tiff.TiffReader.processIfd
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4507497474686976 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4709810764120064 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6375667852509184 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5220947557482496 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in java.base/java.util.ArrayList.<init>
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4765414132154368 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.lang.SequentialReader.getNullTerminatedBytes
Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5543710230970368 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...
metadata-extractor: Out-of-memory when reading a specially crafted JPEG file
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
Important: Red Hat Security Advisory: Red Hat Fuse 7.11.0 release and security update
A minor version update from 7.10 to 7.11 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scorin...
CVE-2022-24613
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
Denial Of Service (DoS)
metadata-extractor is vulnerable to denial of service. The vulnerability exists because the library does not properly handle memory allocation, allowing an attacker to send malicious input to cause large amounts of memory allocation and an application crash...
GHSA-4V6P-CXF9-98RF Allocation of Resources Without Limits or Throttling in metadata-extractor
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1110 more potentially affected by CVE-2022-24614 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)
com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24614 Source advisory: GHSA-4V6P-CXF9-98RF...
GHSA-P5PG-WM9Q-8V6R Improper Handling of Exceptional Conditions inn metadata-extractor
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
Improper Handling of Exceptional Conditions inn metadata-extractor
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
DEBIAN-CVE-2022-24613
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
CVE-2022-24614
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
DEBIAN-CVE-2022-24614
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
CVE-2022-24613
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
CVE-2022-24614
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...
UBUNTU-CVE-2022-24614
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...