{"id":"CVE-2018-8976","aliases":["DEBIAN-CVE-2018-8976","DLA-3265-1","EUVD-2018-0071","GHSA-64gf-9xgm-rfrx","PYSEC-2018-146","RHSA-2019:2101","SUSE-SU-2022:3598-1"],"status":"published","title":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2...","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02095,"percentile":0.81784,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-03-25T00:00:00Z","modified":"2026-10-23T18:03:09Z","fixes":[{"ecosystem":"Debian:12","package":"exiv2","fixed_in":["0.27.2-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exiv2","fixed_in":["0.27.2-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exiv2","fixed_in":["0.27.2-6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-6"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-4+deb10u4"}]}],"versions":["0.25-4","0.25-4+deb10u1","0.25-4+deb10u2","0.25-4+deb10u3"],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"exiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"exiv2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"exiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"exiv2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"exiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"exiv2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"exiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"exiv2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"exiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"exiv2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"exiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"exiv2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"exiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"exiv2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"exiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"exiv2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-2.el7_6"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26-150000.6.16.1"}]}],"bundled":15}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"exiv2","product":"exiv2"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://github.com/Exiv2/exiv2/issues/246","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/201811-14","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2101","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8976","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-64gf-9xgm-rfrx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-8976","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1465061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1494787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1524104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1524107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1524116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1545237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1652637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664361","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2101.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17724","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-4868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4868","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8977","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10772","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10772","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10958","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10958","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10958","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10998","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10998","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10998","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10999","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12264","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12265","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12265","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14046","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17282","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18915","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19107","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19535","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20098","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20099","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684381","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9143","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223598-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076579","tags":["report"]},{"url":"https://bugzilla.suse.com/1086798","tags":["report"]},{"url":"https://bugzilla.suse.com/1086810","tags":["report"]},{"url":"https://bugzilla.suse.com/1092096","tags":["report"]},{"url":"https://bugzilla.suse.com/1114690","tags":["report"]},{"url":"https://bugzilla.suse.com/1185447","tags":["report"]},{"url":"https://bugzilla.suse.com/1186192","tags":["report"]},{"url":"https://bugzilla.suse.com/1188733","tags":["report"]},{"url":"https://bugzilla.suse.com/1188756","tags":["report"]},{"url":"https://bugzilla.suse.com/1189330","tags":["report"]},{"url":"https://bugzilla.suse.com/1189331","tags":["report"]},{"url":"https://bugzilla.suse.com/1189332","tags":["report"]},{"url":"https://bugzilla.suse.com/1189333","tags":["report"]},{"url":"https://bugzilla.suse.com/1189636","tags":["report"]},{"url":"https://bugzilla.suse.com/1189780","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-18898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-18899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37621","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-8976","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"published","published":"2018-03-25T00:00:00Z","modified":"2024-08-05T07:10:47.327Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-0071","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"published","published":"2018-03-25T00:00:00Z","modified":"2024-08-05T07:10:47Z","updated_at":"2026-11-03T02:40:01.4233Z"}],"ghsa":[{"id":"GHSA-64gf-9xgm-rfrx","title":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2...","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"published","published":"2022-05-14T00:54:20Z","modified":"2023-01-29T05:02:55Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:45:11.88268Z"}],"nvd":[{"id":"CVE-2018-8976","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"published","published":"2018-03-25T03:29:00.447Z","modified":"2026-06-17T02:05:45.567Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:24.264003Z"}],"osv":[{"id":"CVE-2018-8976","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"published","published":"2018-03-25T03:29:00.447Z","modified":"2026-10-20T10:50:32.153583798Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2018-8976","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"published","published":"2018-03-25T03:29:00.447Z","modified":"2026-10-23T18:03:09.747308975Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"PYSEC-2018-146","description":"In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.","status":"withdrawn","published":"2018-03-25T03:29:00Z","modified":"2025-10-09T05:32:07.700181Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"RHSA-2019:2101","title":"Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:04:53Z","modified":"2026-06-27T10:07:48Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"DLA-3265-1","title":"exiv2 - security update","status":"published","published":"2023-01-10T00:00:00Z","modified":"2026-03-09T01:18:16.024502Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"SUSE-SU-2022:3598-1","title":"Security update for exiv2","description":"This update for exiv2 fixes the following issues:\n\n- CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).\n- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).\n- CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).\n- CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).\n- CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192).\n- CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).\n- CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733).\n- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).\n- CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).\n- CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).\n- CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798).\n- CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810).\n- CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579).\n- CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).\n- CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).\n","status":"published","published":"2022-10-17T11:19:23Z","modified":"2026-02-04T02:17:37.373078Z","updated_at":"2026-11-02T15:53:51.440565Z"}]}}