Skip to content
Noroxi

Exiv2 records

124 published records for vendor exiv2.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
86.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

124 records
  • CVE-2018-11531
    40Plan

    Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.

    CriticalCVSS 9.8No exploitEPSS 3%

    exiv2 · exiv2May 29, 2018

  • CVE-2018-12264
    36Monitor

    Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea

    HighCVSS 8.8No exploitEPSS 3%

    exiv2 · exiv2Jun 13, 2018

  • CVE-2018-12265
    36Monitor

    Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in bas

    HighCVSS 8.8No exploitEPSS 3%

    exiv2 · exiv2Jun 13, 2018

  • CVE-2019-9144
    36Monitor

    An issue was discovered in Exiv2 0.27.

    HighCVSS 8.8No exploitEPSS 3%

    exiv2 · exiv2Feb 25, 2019

  • CVE-2019-9143
    36Monitor

    An issue was discovered in Exiv2 0.27.

    HighCVSS 8.8No exploitEPSS 3%

    exiv2 · exiv2Feb 25, 2019

  • CVE-2018-14046
    36Monitor

    Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

    HighCVSS 8.8No exploitEPSS 2%

    exiv2 · exiv2Jul 13, 2018

  • CVE-2017-12955
    36Monitor

    There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26.

    HighCVSS 8.8No exploitEPSS 2%

    exiv2 · exiv2Aug 18, 2017

  • CVE-2023-44398
    35Monitor

    Out-of-bounds write in exiv2

    HighCVSS 8.8No exploitEPSS 1%

    exiv2 · exiv2Nov 6, 2023

  • CVE-2018-9305
    33Monitor

    In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0

    HighCVSS 8.1No exploitEPSS 2%

    exiv2 · exiv2Apr 4, 2018

  • CVE-2018-9144
    33Monitor

    In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp.

    HighCVSS 8.1No exploitEPSS 2%

    exiv2 · exiv2Mar 30, 2018

  • CVE-2020-18771
    33Monitor

    Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an inf

    HighCVSS 8.1No exploitEPSS 2%

    exiv2 · exiv2Aug 23, 2021

  • CVE-2017-17723
    33Monitor

    In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp.

    HighCVSS 8.1No exploitEPSS 2%

    exiv2 · exiv2Feb 12, 2018

  • CVE-2021-29457
    32Monitor

    Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata

    HighCVSS 7.8No exploitEPSS 2%

    exiv2 · exiv2Apr 19, 2021

  • CVE-2018-14338
    32Monitor

    samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where gli

    HighCVSS 8.1No exploitEPSS 1%

    exiv2 · exiv2Jul 17, 2018

  • CVE-2007-6353
    31Monitor

    Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that trig

    HighCVSS 7.5No exploitEPSS 5%

    exiv2 · exiv2Dec 19, 2007

  • CVE-2019-20421
    31Monitor

    In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumptio

    HighCVSS 7.5No exploitEPSS 4%

    exiv2 · exiv2Jan 27, 2020

  • CVE-2017-11591
    31Monitor

    There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via c

    HighCVSS 7.5No exploitEPSS 3%

    exiv2 · exiv2Jul 23, 2017

  • CVE-2017-9953
    31Monitor

    There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26.

    HighCVSS 7.5No exploitEPSS 3%

    exiv2 · exiv2Jun 26, 2017

  • CVE-2021-31292
    31Monitor

    An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of s

    HighCVSS 7.5No exploitEPSS 3%

    exiv2 · exiv2Jul 26, 2021

  • CVE-2017-11592
    31Monitor

    There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote

    HighCVSS 7.5No exploitEPSS 2%

    exiv2 · exiv2Jul 23, 2017

  • CVE-2017-11553
    31Monitor

    There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26.

    HighCVSS 7.5No exploitEPSS 2%

    exiv2 · exiv2Jul 22, 2017

  • CVE-2021-29464
    31Monitor

    Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header

    HighCVSS 7.8No exploitEPSS 1%

    exiv2 · exiv2Apr 30, 2021

  • CVE-2019-14368
    31Monitor

    Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

    HighCVSS 7.8No exploitEPSS 1%

    exiv2 · exiv2Jul 28, 2019

  • CVE-2020-18831
    31Monitor

    Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service

    HighCVSS 7.8No exploitEPSS 1%

    exiv2 · exiv2Aug 22, 2023

  • CVE-2018-20096
    27Monitor

    There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3.

    MediumCVSS 6.5No exploitEPSS 3%

    exiv2 · exiv2Dec 12, 2018