{"id":"CVE-2017-1000128","aliases":["EUVD-2017-0031","GHSA-7pwx-rg9x-r4xw","PYSEC-2017-117","SUSE-SU-2022:3889-1","openSUSE-SU-2024:10747-1"],"status":"published","title":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01119,"percentile":0.6637,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2017-11-17T22:00:00Z","modified":"2026-10-24T10:30:27Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.5-150400.15.4.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"exiv2-0_26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150400.9.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.5-150400.15.4.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"exiv2-0_26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150400.9.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.4-1.2"}]}],"bundled":12}],"products":[{"vendor":"exiv2","product":"exiv2"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2017/06/30/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000128"},{"url":"https://github.com/advisories/GHSA-7pwx-rg9x-r4xw"},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223889-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068871","tags":["report"]},{"url":"https://bugzilla.suse.com/1142675","tags":["report"]},{"url":"https://bugzilla.suse.com/1142679","tags":["report"]},{"url":"https://bugzilla.suse.com/1185002","tags":["report"]},{"url":"https://bugzilla.suse.com/1185218","tags":["report"]},{"url":"https://bugzilla.suse.com/1185447","tags":["report"]},{"url":"https://bugzilla.suse.com/1185913","tags":["report"]},{"url":"https://bugzilla.suse.com/1186053","tags":["report"]},{"url":"https://bugzilla.suse.com/1186192","tags":["report"]},{"url":"https://bugzilla.suse.com/1188645","tags":["report"]},{"url":"https://bugzilla.suse.com/1188733","tags":["report"]},{"url":"https://bugzilla.suse.com/1189332","tags":["report"]},{"url":"https://bugzilla.suse.com/1189333","tags":["report"]},{"url":"https://bugzilla.suse.com/1189334","tags":["report"]},{"url":"https://bugzilla.suse.com/1189335","tags":["report"]},{"url":"https://bugzilla.suse.com/1189338","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-19716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37623","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12264","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-1000128","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","status":"published","published":"2017-11-17T22:00:00Z","modified":"2024-09-16T17:28:41.261Z","updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-0031","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","status":"published","published":"2017-11-17T22:00:00Z","modified":"2024-09-16T17:28:41Z","updated_at":"2026-11-03T00:55:41.41816Z"}],"ghsa":[{"id":"GHSA-7pwx-rg9x-r4xw","title":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","status":"published","published":"2022-05-17T00:19:57Z","modified":"2023-02-03T05:01:24Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:52:58.812908Z"}],"nvd":[{"id":"CVE-2017-1000128","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","status":"published","published":"2017-11-17T22:29:00.3Z","modified":"2026-06-17T00:58:47.39Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:09.7374Z"}],"osv":[{"id":"CVE-2017-1000128","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","status":"published","published":"2017-11-17T22:29:00.3Z","modified":"2026-10-24T10:30:27.342365187Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"PYSEC-2017-117","description":"Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser","status":"withdrawn","published":"2017-11-17T22:29:00Z","modified":"2025-10-09T05:26:54.71158Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"openSUSE-SU-2024:10747-1","title":"exiv2-0.27.4-1.2 on GA media","description":"These are all security issues fixed in the exiv2-0.27.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:13.410385Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2022:3889-1","title":"Security update for exiv2","description":"This update for exiv2 fixes the following issues:\n\nUpdated to version 0.27.5 (jsc#PED-1393):\n\n- CVE-2017-1000128: Fixed stack out of bounds read in JPEG2000 parser (bsc#1068871).\n- CVE-2019-13108: Fixed integer overflow PngImage:readMetadata (bsc#1142675).\n- CVE-2020-19716: Fixed buffer overflow vulnerability in the Databuf function in types.cpp (bsc#1188645).\n- CVE-2021-29457: Fixed heap buffer overflow when write metadata into a crafted image file (bsc#1185002).\n- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).\n- CVE-2021-29623: Fixed read of uninitialized memory (bsc#1186053).\n- CVE-2021-31291: Fixed heap-based buffer overflow in jp2image.cpp (bsc#1188733).\n- CVE-2021-32617: Fixed denial of service due to inefficient algorithm (bsc#1186192).\n- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).\n- CVE-2021-37621: Fixed DoS due to infinite loop in Image:printIFDStructure (bsc#1189333).\n- CVE-2021-37622: Fixed DoS due to infinite loop in JpegBase:printStructure (bsc#1189334)\n- CVE-2021-34334: Fixed DoS due to integer overflow in loop counter(bsc#1189338)\n- CVE-2021-37623: Fixed DoS due to infinite loop in JpegBase:printStructure (bsc#1189335)\n- CVE-2021-29463: Fixed out-of-bounds read in webpimage.cpp (bsc#1185913).\n- CVE-2021-34334: Fixed DoS due to integer overflow in loop counter (bsc#1189338)\n- CVE-2019-13111: Fixed integer overflow in WebPImage:decodeChunks that lead to denial of service (bsc#1142679)\n- CVE-2021-29463: Fixed an out-of-bounds read was found in webpimage.cpp (bsc#1185913)\n\nBugfixes:\n\n- Fixed build using GCC 11 (bsc#1185218).\n\nA new libexiv2-2_27 shared library is shipped, the libexiv2-2_26 is provided only for compatibility now.\n\nPlease recompile your applications using the exiv2 library.\n\n","status":"published","published":"2022-11-07T14:26:03Z","modified":"2025-05-02T04:29:43.038707Z","updated_at":"2026-11-02T15:53:51.440565Z"}]}}