Astra Linux – Vulnerability in exiv2

An invalid memory address dereferencing was discovered in the Exiv2::StringValueBase::read method in value.cpp of Exiv2 0.26. This vulnerability causes a segmentation fault and results in the application crashing, leading to a denial of service...

exiv2:fuzz-read-print-write: Heap-buffer-overflow in Exiv2::StringValueBase::read

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=5671177327083520 Project: exiv2 Fuzzing Engine: afl Fuzz Target: fuzz-read-print-write Job Type: aflasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b0000002b6 Cra...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2::StringValueBase::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory address dereference attacks. The vulnerability exists in Exiv2::StringValueBase::read of value.cpp while parsing an image with malicious exif values, causing a denial of service DoS attack...

PT-2017-19369

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A memory address dereference issue was found in the read function of Exiv2::StringValueBase in value.cpp, causing a segmentation fault and application crash. This results in a denial of service. Recommendations F...

CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Exiv2 Exiv2::StringValueBase::read Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the...

PT-2017-4064

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid memory address dereference in the Exiv2::StringValueBase::read function in value.cpp of the Exiv2 library. This can cause a segmentation fault and application crash, leading to...