CVE-2018-12648

CVE-2018-12648 affects Exempi (notably the WEBP_Support.hpp GetLE32 path) with a NULL pointer dereference when processing WEBP files in Exempi 2.4.5. Public data confirms a remote, unauthenticated, network-exploitable issue with impact on availability (high in CVSSv3, medium in CVSSv2) as describ...

CVE-2020-18651

CVE-2020-18651 affects the exempi library (ID3v2Frame::getFrameValue) and causes a buffer overflow DoS when opening crafted audio files with ID3V2 frames. Multiple connected advisories (including MiracleLinux, TencentOS Server, Rocky Linux, RHEL, Oracle Linux, AlmaLinux, CentOS, Astra Linux, Rock...

CVE-2020-18652

CVE-2020-18652 is a buffer overflow vulnerability in exempi’s WEBP_Support.cpp (affected in exempi 2.5.0 and earlier) that allows remote denial of service by opening a crafted webp file. Connected advisories from MiracleLinux, TencentOS, Rocky Linux, Oracle Linux, Red Hat, AlmaLinux, CentOS, etc....

CVE-2017-18233

Exempi before 2.4.4 is affected by CVE-2017-18233: an integer overflow in XMPFiles/source/FormatSupport/RIFF.cpp (Chunk class) allows a crafted XMP payload in a .avi file to trigger a denial of service (infinite loop). The description in the initial document confirms the vulnerability in Exempi u...

CVE-2017-18234

Exempi (before 2.4.3) is vulnerable to a denial of service via a PDF file containing JPEG data, caused by an invalid memcpy leading to use-after-free in XMPFiles sources (ReconcileTIFF.cpp, TIFF_MemoryReader.cpp, TIFF_Support.hpp). Products built on Exempi prior to 2.4.3 are affected; upgrade to ...

CVE-2017-18238

CVE-2017-18238 affects Exempi (before 2.4.4). The issue lies in TradQT_Manager::ParseCachedBoxes in XMPFiles/source/FormatSupport/QuickTime_Support.cpp, which allows remote attackers to trigger a denial of service (infinite loop) via crafted XMP data in a .qt file. This vulnerability is documente...

CVE-2018-7730

CVE-2018-7730 affects Exempi up to version 2.4.4. A specific case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, causing a heap-based buffer over-read in PSD_MetaHandler::CacheFileData(). Connected documentation confirms the affected file and function a...

CVE-2018-7728

CVE-2018-7728 affects Exempi up to version 2.4.4, where TIFF_Handler.cpp mishandles a zero-length case, causing a heap-based buffer over-read in MD5Update(). The issue is fixed in Exempi 2.4.5 (Fedora 28) and incorporated in various vendor advisories (e.g., SUSE SUSE-SU-2018:3389-1; EulerOS advis...

CVE-2018-7729

CVE-2018-7729 affects Exempi up to version 2.4.4. A stack-based buffer over-read occurs in PostScript_MetaHandler::ParsePSFile() within XMPFiles/source/FileHandlers/PostScript_Handler.cpp. Public-advisory context indicates that exploitation could cause a remote host to hang/crash (DoS) and, per U...

CVE-2017-18236

CVE-2017-18236 is confirmed in connected sources as an issue in Exempi before 2.4.4 where ASF_Support::ReadHeaderObject in XMPFiles/source/FormatSupport/ASF_Support.cpp can be triggered by a crafted .asf file to cause a denial of service (infinite loop). The connected Nessus/NASL entries referenc...

CVE-2018-7731

CVE-2018-7731 affects Exempi up to v2.4.4. The issue is in WEBP_Support.cpp (WEBP_Support) where WEBP::VP8XChunk does not check for a NULL bitstream, causing a NULL pointer dereference. Connected sources corroborate Exempi-related CVEs and indicate fixes in newer packages (e.g., exempi 2.4.5 in F...

CVE-2017-18237

Exempi vulnerability CVE-2017-18237: The PostScript_Support::ConvertToDate function in XMPFiles/source/FormatSupport/PostScript_Support.cpp allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted .ps file. Affects Exempi before 2.4.3....

CVE-2017-18235

Exempi before 2.4.3 contains a vulnerability in WEBP_Support.cpp’s VPXChunk handling: it does not ensure nonzero widths/heights, which can be exploited by a crafted .webp file to cause a denial of service via an assertion failure and application exit. This CVE is CVE-2017-18235. Public documents ...