CVE-2017-14860: Out-of-bounds Read

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Exiv2 Exiv2::Jp2Image::readMetadata function heap buffer overflow vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A heap buffer overflow vulnerability exists in the...

PT-2017-13731

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer over-read issue exists in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp. This can be triggered by a crafted input, leading to a denial of service attack. Recommendations For Exiv2...

PT-2015-2881

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.5 Description The issue is related to an integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright. This can be exploited by a...