There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26

An issue was discovered in Exiv2 0.26

Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Out-of-bounds read in Exiv2::Jp2Image::printStructure

Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header

Denial of service due to infinite loop in JpegBase::printStructure (#1)

Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff

Null pointer dereference in Exiv2::Internal::resolveLens0x319

Denial of service due to infinite loop in Image::printIFDStructure

Out-of-bounds read in XmpTextValue::read()

Denial of service due to assertion failure in crwimage_int.cpp

Denial of service due to integer overflow in loop counter

Denial of service due to infinite loop in JpegBase::printStructure (#2)

Null pointer dereference in Exiv2::Internal::resolveLens0x8ff

Denial of service in Exiv2

Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata

Out-of-bounds read in Exiv2::Internal::CrwMap::encode

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via…

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26

Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser

Exiv2 0.26 contains a heap buffer overflow in tiff parser

exiv2 0.26 contains a Stack out of bounds read in webp parser

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26

There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault

Exiv2: Uncaught exception - cannot create std::vector larger than max_size()

Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2

Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2