Most recent entries from all

bdu:2021-01449

cnvd-2018-00550

EUVD-2026-79712

fkie_cve-2017-17669

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

GHSA-4635-wwr6-rxx5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

gsd-2017-17669

Withdrawn: PYSEC-2017-140

Withdrawn by the publisher.

Affected: PyPI: exiv2

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

SUSE-SU-2018:3882-1 — Security update for exiv2

Security update for exiv2

UBUNTU-CVE-2017-17669

Affected: Ubuntu:14.04:LTS: exiv2, Ubuntu:16.04:LTS: exiv2, Ubuntu:18.04:LTS: exiv2

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.