← Back

Exiv2

exiv2

Vendor: Exiv2 • 124 CVEs

CVEs (124)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-9239
2Canonical
Exiv2
2Exiv2
Ubuntu Linux
May 13, 2026
May 26, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of p...Show more
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.Show less
CVE-2014-9449
2Exiv2
Fedoraproject
2Exiv2
Fedora
May 6, 2026
Jan 2, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
CVE-2008-2696
1Exiv2
1Exiv2
Apr 23, 2026
Jun 13, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" an...Show more
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function.Show less
CVE-2007-6353
3Canonical
DebianExiv2
3Debian Linux
Exiv2Ubuntu Linux
Apr 23, 2026
Dec 20, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.