exiv2 (SUSE:Linux Enterprise Module for Desktop Applications 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 package exiv2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (25)

• CVE-2021-29457 — CVSS 7.8 (high): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer…
• CVE-2021-31292 — CVSS 7.5 (high): An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of…
• CVE-2018-8976 — CVSS 6.5 (medium): In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds…
• CVE-2018-8977 — CVSS 6.5 (medium): In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service…
• CVE-2019-13108 — CVSS 6.5 (medium): An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because…
• CVE-2018-18915 — CVSS 6.5 (medium): There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a…
• CVE-2020-18898 — CVSS 6.5 (medium): A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a…
• CVE-2020-19716 — CVSS 6.5 (medium): A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
• CVE-2020-18899 — CVSS 6.5 (medium): An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of…
• CVE-2018-10772 — CVSS 6.5 (medium): The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash)…
• CVE-2017-1000128 — CVSS 5.5 (medium): Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser
• CVE-2018-5772 — CVSS 5.5 (medium): In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the…
• CVE-2019-13111 — CVSS 5.5 (medium): A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation…
• CVE-2021-34334 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop…
• CVE-2021-37621 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop…
• CVE-2021-37622 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop…
• CVE-2021-37623 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop…
• CVE-2021-32617 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient…
• CVE-2021-37620 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-37618 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-37619 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29470 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29623 — CVSS 3.6 (low): Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of…
• CVE-2021-29463 — CVSS 3.3 (low): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-31291: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457…