| Max CVSS | 4.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-19107 | 4.3 |
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.
|
01-03-2023 - 17:13 | 08-11-2018 - 08:29 | |
| CVE-2019-13112 | 4.3 |
A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.
|
28-02-2023 - 20:48 | 30-06-2019 - 23:15 | |
| CVE-2019-13113 | 4.3 |
Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file.
|
28-02-2023 - 20:48 | 30-06-2019 - 23:15 | |
| CVE-2019-13110 | 4.3 |
A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file.
|
02-02-2023 - 19:43 | 30-06-2019 - 23:15 | |
| CVE-2018-19108 | 4.3 |
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
|
13-01-2023 - 16:35 | 08-11-2018 - 08:29 | |
| CVE-2018-19535 | 4.3 |
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
|
13-01-2023 - 16:35 | 26-11-2018 - 02:29 | |
| CVE-2019-13114 | 4.3 |
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
|
13-01-2023 - 16:09 | 30-06-2019 - 23:15 |