Search for packages
| purl | pkg:pypi/exiv2@0.17.4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2008-11
|
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value … | There are no reported fixed by versions. |
|
PYSEC-2015-36
|
Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2017-124
|
There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial … | There are no reported fixed by versions. |
|
PYSEC-2017-126
|
There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote … | There are no reported fixed by versions. |
|
PYSEC-2017-132
|
An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault … | There are no reported fixed by versions. |
|
PYSEC-2017-135
|
An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault … | There are no reported fixed by versions. |
|
PYSEC-2017-137
|
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault … | There are no reported fixed by versions. |
|
PYSEC-2017-140
|
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will … | There are no reported fixed by versions. |
|
PYSEC-2017-141
|
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF … | There are no reported fixed by versions. |
|
PYSEC-2018-118
Aliases: CVE-2018-20097 |
There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial … | There are no reported fixed by versions. |
|
PYSEC-2018-127
|
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) … | There are no reported fixed by versions. |
|
PYSEC-2018-139
|
CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service. | There are no reported fixed by versions. |
|
PYSEC-2018-141
|
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of … | There are no reported fixed by versions. |
|
PYSEC-2018-142
|
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) … | There are no reported fixed by versions. |
|
PYSEC-2018-146
|
In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted … | There are no reported fixed by versions. |
|
PYSEC-2019-245
|
Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a crafted … | There are no reported fixed by versions. |
|
PYSEC-2019-246
|
In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service. | There are no reported fixed by versions. |
|
PYSEC-2019-247
|
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there … | There are no reported fixed by versions. |
|
PYSEC-2020-344
|
In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high … | There are no reported fixed by versions. |
|
PYSEC-2021-877
Aliases: CVE-2021-31292 |
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial … | There are no reported fixed by versions. |
|
PYSEC-2021-879
Aliases: CVE-2020-18899 |
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via … | There are no reported fixed by versions. |
|
PYSEC-2021-882
|
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak. | There are no reported fixed by versions. |
|
PYSEC-2021-883
|
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of … | There are no reported fixed by versions. |
|
PYSEC-2021-884
|
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of … | There are no reported fixed by versions. |
|
PYSEC-2021-885
|
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2021-886
|
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS). | There are no reported fixed by versions. |
|
PYSEC-2023-150
Aliases: CVE-2020-18831 |
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2023-233
Aliases: CVE-2023-44398 GHSA-hrw9-ggg3-3r4r |
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC … | There are no reported fixed by versions. |
|
PYSEC-2017-112
Aliases: CVE-2017-9239 |
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns … | There are no reported fixed by versions. |
|
PYSEC-2017-115
|
exiv2 0.26 contains a Stack out of bounds read in webp parser | There are no reported fixed by versions. |
|
PYSEC-2017-116
|
Exiv2 0.26 contains a heap buffer overflow in tiff parser | There are no reported fixed by versions. |
|
PYSEC-2017-117
|
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser | There are no reported fixed by versions. |
|
PYSEC-2017-118
|
There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-119
|
There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to … | There are no reported fixed by versions. |
|
PYSEC-2017-120
|
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to … | There are no reported fixed by versions. |
|
PYSEC-2017-121
|
There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-122
|
There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input … | There are no reported fixed by versions. |
|
PYSEC-2017-123
|
There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-125
|
There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a … | There are no reported fixed by versions. |
|
PYSEC-2017-127
|
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which … | There are no reported fixed by versions. |
|
PYSEC-2017-128
|
There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote … | There are no reported fixed by versions. |
|
PYSEC-2017-129
|
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. … | There are no reported fixed by versions. |
|
PYSEC-2017-130
|
In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. … | There are no reported fixed by versions. |
|
PYSEC-2017-131
|
There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-133
|
There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-134
|
There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-136
|
A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and … | There are no reported fixed by versions. |
|
PYSEC-2017-138
|
There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-139
|
There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2017-142
|
There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will … | There are no reported fixed by versions. |
|
PYSEC-2018-117
Aliases: CVE-2018-20096 |
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead … | There are no reported fixed by versions. |
|
PYSEC-2018-119
Aliases: CVE-2018-20098 |
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a … | There are no reported fixed by versions. |
|
PYSEC-2018-120
Aliases: CVE-2018-20099 |
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote … | There are no reported fixed by versions. |
|
PYSEC-2018-121
|
In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote … | There are no reported fixed by versions. |
|
PYSEC-2018-122
|
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this … | There are no reported fixed by versions. |
|
PYSEC-2018-123
|
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" … | There are no reported fixed by versions. |
|
PYSEC-2018-124
|
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. … | There are no reported fixed by versions. |
|
PYSEC-2018-125
|
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read. | There are no reported fixed by versions. |
|
PYSEC-2018-126
|
In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation … | There are no reported fixed by versions. |
|
PYSEC-2018-128
|
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read. | There are no reported fixed by versions. |
|
PYSEC-2018-129
|
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file. | There are no reported fixed by versions. |
|
PYSEC-2018-130
|
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. | There are no reported fixed by versions. |
|
PYSEC-2018-131
|
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. | There are no reported fixed by versions. |
|
PYSEC-2018-132
|
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in … | There are no reported fixed by versions. |
|
PYSEC-2018-133
|
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp. | There are no reported fixed by versions. |
|
PYSEC-2018-134
|
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where … | There are no reported fixed by versions. |
|
PYSEC-2018-135
|
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image … | There are no reported fixed by versions. |
|
PYSEC-2018-136
|
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a … | There are no reported fixed by versions. |
|
PYSEC-2018-137
|
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a … | There are no reported fixed by versions. |
|
PYSEC-2018-138
|
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference. | There are no reported fixed by versions. |
|
PYSEC-2018-140
|
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to … | There are no reported fixed by versions. |
|
PYSEC-2018-143
|
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application … | There are no reported fixed by versions. |
|
PYSEC-2018-144
|
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) … | There are no reported fixed by versions. |
|
PYSEC-2018-145
|
In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. … | There are no reported fixed by versions. |
|
PYSEC-2018-147
|
In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory access) … | There are no reported fixed by versions. |
|
PYSEC-2018-148
|
In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. … | There are no reported fixed by versions. |
|
PYSEC-2019-244
|
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp. | There are no reported fixed by versions. |
|
PYSEC-2019-248
|
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be … | There are no reported fixed by versions. |
|
PYSEC-2019-249
|
An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be … | There are no reported fixed by versions. |