49 matches found
CLEANSTART-2024-QV79984 WebPImage::decodeChunks integer overflow in Exiv2 through 0
Security vulnerability affects the exiv2 package. A WebPImage::decodeChunks integer overflow in Exiv2 through 0...
EUVD-2018-0058
Malware in sbrugna...
EUVD-2019-6072
Malware in sbrugna...
PT-2024-13827
Name of the Vulnerable Software and Affected Versions WWBN AVideo dev master commit 15fed957fb Description An information disclosure issue exists in the aVideoEncoderReceiveImage.json.php image upload functionality. A specially crafted HTTP request can lead to arbitrary file read. This issue is...
The vulnerability of the webpimage.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.
The vulnerability of the webpimage.cpp component in the Exiv2 media metadata management library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Oracle Linux 7 : exiv2 (ELSA-2019-2101)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...
Buffer Overflow
libexiv2.so is vulnerable to buffer overflow. The vulnerability exists when datasize is less than headersize in the WebPImage::getHeaderOffset function of webpimage.cpp, allowing an attacker to cause an application crash through the integer overflow by providing a malicious input...
Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
...
CVE-2021-29463 Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...
CVE-2021-29463 Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...
Updated exiv2 packages fix security vulnerability
The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file. CVE-2019-13111...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow in WebPImage::decodeChunks...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2019-2072)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-2072)
According to the version of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a...
CVE-2019-14982
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash...
CVE-2019-14982
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash...
Integer overflow
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash...
CVE-2019-14982
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash...
CVE-2019-14982
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buffer overflow vulnerability and a crash...
CVE-2019-14982
This CVE affects Exiv2 prior to v0.27.2, where WebPImage::getHeaderOffset in webpimage.cpp has an integer overflow that can cause a buffer overflow and crash. Impact is a crash risk (no explicit remote code execution noted in sources). A fix is available in v0.27.2 and later. External references ...