exiv2-doc (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package exiv2-doc, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (44)

• CVE-2019-9143 — CVSS 8.8 (high): An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be…
• CVE-2018-14338 — CVSS 8.1 (high): samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where…
• CVE-2018-9305 — CVSS 8.1 (high): In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "==…
• CVE-2021-29457 — CVSS 7.8 (high): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer…
• CVE-2019-20421 — CVSS 7.5 (high): In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU…
• CVE-2021-31292 — CVSS 7.5 (high): An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of…
• CVE-2018-17581 — CVSS 6.5 (medium): CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to…
• CVE-2018-18915 — CVSS 6.5 (medium): There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a…
• CVE-2018-19107 — CVSS 6.5 (medium): In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service…
• CVE-2018-19535 — CVSS 6.5 (medium): In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a…
• CVE-2018-19607 — CVSS 6.5 (medium): Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and…
• CVE-2018-20096 — CVSS 6.5 (medium): There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to…
• CVE-2018-20097 — CVSS 6.5 (medium): There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead…
• CVE-2018-20098 — CVSS 6.5 (medium): There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to…
• CVE-2018-20099 — CVSS 6.5 (medium): There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote…
• CVE-2018-9303 — CVSS 6.5 (medium): In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
• CVE-2018-9304 — CVSS 6.5 (medium): In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
• CVE-2019-13109 — CVSS 6.5 (medium): An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because…
• CVE-2019-13112 — CVSS 6.5 (medium): A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash…
• CVE-2019-13113 — CVSS 6.5 (medium): Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW…
• CVE-2019-13114 — CVSS 6.5 (medium): http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by…
• CVE-2019-17402 — CVSS 6.5 (medium): Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirect…
• CVE-2018-19108 — CVSS 6.5 (medium): In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop)…
• CVE-2018-10772 — CVSS 6.5 (medium): The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash)…
• CVE-2018-11037 — CVSS 6.5 (medium): In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a…
• CVE-2018-17229 — CVSS 6.5 (medium): Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted…
• CVE-2018-17230 — CVSS 6.5 (medium): Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted…
• CVE-2018-17282 — CVSS 6.5 (medium): An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.
• CVE-2020-18898 — CVSS 6.5 (medium): A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a…
• CVE-2021-3482 — CVSS 6.5 (medium): A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in…
• CVE-2017-18005 — CVSS 5.5 (medium): Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
• CVE-2018-4868 — CVSS 5.5 (medium): The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive…
• CVE-2021-29458 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2019-13111 — CVSS 5.5 (medium): A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation…
• CVE-2021-37619 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29470 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-32617 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient…
• CVE-2021-37618 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29623 — CVSS 3.6 (low): Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of…
• CVE-2021-29464 — CVSS 3.3 (low): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer…
• CVE-2021-29463 — CVSS 3.3 (low): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29473 — CVSS 2.5 (low): Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An…
• CVE-2021-31291: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457…
• CVE-2018-9306: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of…