Vulnerabilities > Exiv2 > Exiv2 > 0.27.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-04-19 | CVE-2021-29457 | Heap-based Buffer Overflow vulnerability in multiple products Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. | 7.8 |
2021-04-08 | CVE-2021-3482 | Out-of-bounds Write vulnerability in multiple products A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. | 6.5 |
2019-08-12 | CVE-2019-14982 | Integer Overflow or Wraparound vulnerability in Exiv2 In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. | 4.3 |
2019-07-11 | CVE-2019-13504 | Out-of-bounds Read vulnerability in multiple products There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2. | 6.5 |
2019-06-30 | CVE-2019-13114 | NULL Pointer Dereference vulnerability in multiple products http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character. | 6.5 |
2019-06-30 | CVE-2019-13113 | Reachable Assertion vulnerability in multiple products Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file. | 6.5 |
2019-06-30 | CVE-2019-13112 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file. | 6.5 |
2019-06-30 | CVE-2019-13111 | Integer Overflow or Wraparound vulnerability in multiple products A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file. | 5.5 |
2019-06-30 | CVE-2019-13110 | Integer Overflow or Wraparound vulnerability in multiple products A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file. | 6.5 |
2019-06-30 | CVE-2019-13109 | Integer Overflow or Wraparound vulnerability in multiple products An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction. | 6.5 |