| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-11683 | 4.3 |
There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
|
20-01-2023 - 02:11 | 27-07-2017 - 06:29 | |
| CVE-2017-14862 | 4.3 |
An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
|
13-01-2023 - 16:45 | 29-09-2017 - 01:34 | |
| CVE-2017-11591 | 5.0 |
There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
|
13-01-2023 - 16:45 | 24-07-2017 - 01:29 | |
| CVE-2017-17669 | 4.3 |
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.
|
13-01-2023 - 16:44 | 13-12-2017 - 22:29 | |
| CVE-2017-14864 | 4.3 |
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
|
13-01-2023 - 16:44 | 29-09-2017 - 01:34 | |
| CVE-2018-17581 | 4.3 |
CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.
|
13-01-2023 - 16:34 | 28-09-2018 - 09:29 | |
| CVE-2017-14859 | 4.3 |
An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
|
13-01-2023 - 16:04 | 29-09-2017 - 01:34 | |
| CVE-2017-9239 | 4.3 |
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentatio
|
09-04-2020 - 00:15 | 26-05-2017 - 10:29 | |
| CVE-2018-16336 | 4.3 |
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999.
|
03-10-2019 - 00:03 | 02-09-2018 - 03:29 |