Vulnerabilities > Exiv2 > Exiv2 > 0.12

DATE CVE VULNERABILITY TITLE RISK
2018-05-07 CVE-2018-10772 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Exiv2
The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
network
exiv2 CWE-119
4.3
2018-04-04 CVE-2018-9305 Out-of-bounds Read vulnerability in Exiv2
In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.
network
exiv2 CWE-125
5.8
2018-04-04 CVE-2018-9304 Divide By Zero vulnerability in Exiv2
In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
network
exiv2 CWE-369
4.3
2018-04-04 CVE-2018-9303 Reachable Assertion vulnerability in Exiv2
In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
network
exiv2 CWE-617
4.3
2018-03-30 CVE-2018-9144 Out-of-bounds Read vulnerability in Exiv2
In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp.
network
exiv2 CWE-125
5.8