exiv2 Vulnerability Advisory Catalog

Total 124 security vulnerabilities recorded for exiv2 software and firmware.

← Back to All Vendors
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found ...

📅 2021-08-09
CVSS 5.5 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is trigger...

📅 2021-08-09
CVSS 5.5 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is tr...

📅 2021-08-09
CVSS 5.5 Dossier →
Component: exiv2

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DO...

📅 2021-07-26
CVSS 7.5 Dossier →
Component: exiv2

A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS)....

📅 2021-07-13
CVSS 6.5 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient algorithm (q...

📅 2021-05-17
CVSS 4.7 Dossier →
Component: exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized me...

📅 2021-05-13
CVSS 3.6 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was ...

📅 2021-04-30
CVSS 3.3 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was f...

📅 2021-04-30
CVSS 3.3 Dossier →
Component: exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was ...

📅 2021-04-26
CVSS 2.5 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was f...

📅 2021-04-23
CVSS 4.7 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was f...

📅 2021-04-19
CVSS 5.5 Dossier →
Component: exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was ...

📅 2021-04-19
CVSS 7.8 Dossier →
CVE-2021-3482 MEDIUM
Component: exiv2

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadat...

📅 2021-04-08
CVSS 6.5 Dossier →
Component: exiv2

In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote ...

📅 2020-01-27
CVSS 7.5 Dossier →
Component: exiv2

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crw...

📅 2019-10-09
CVSS 6.5 Dossier →
Component: exiv2

In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buff...

📅 2019-08-12
CVSS 6.5 Dossier →
Component: exiv2

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service....

📅 2019-07-28
CVSS 6.5 Dossier →
Component: exiv2

Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a c...

📅 2019-07-28
CVSS 6.5 Dossier →
Component: exiv2

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp....

📅 2019-07-28
CVSS 7.8 Dossier →
Component: exiv2

There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2....

📅 2019-07-11
CVSS 6.5 Dossier →
Component: exiv2

http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a cr...

📅 2019-06-30
CVSS 6.5 Dossier →
Component: exiv2

Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file...

📅 2019-06-30
CVSS 6.5 Dossier →
Component: exiv2

A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an ...

📅 2019-06-30
CVSS 6.5 Dossier →
Page 2 of 6 (124 Total Records)