{"id":"CVE-2019-13112","aliases":["ALPINE-CVE-2019-13112","ALSA-2020:1577","DEBIAN-CVE-2019-13112","DLA-3265-1","EUVD-2019-4653","GHSA-5w5r-cgx2-jf78","MGASA-2019-0415","RHSA-2020:1577","RLSA-2020:1577","SUSE-SU-2022:4252-1","UBUNTU-CVE-2019-13112","USN-4056-1"],"status":"published","title":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an...","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01903,"percentile":0.79879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2019-06-30T00:00:00Z","modified":"2026-11-05T12:15:05Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"exiv2","fixed_in":["0.27.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exiv2","fixed_in":["0.27.2-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exiv2","fixed_in":["0.27.2-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exiv2","fixed_in":["0.27.2-6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"exiv2","fixed_in":["0.25-2.1ubuntu16.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"exiv2","fixed_in":["0.25-3.1ubuntu0.18.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"exiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"exiv2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-39.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnome-color-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.0-3.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libgexiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libgexiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Debian:12","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.2-6"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-4+deb10u4"}]}],"versions":["0.25-4","0.25-4+deb10u1","0.25-4+deb10u2","0.25-4+deb10u3"],"bundled":26},{"source":"osv","ecosystem":"Mageia:7","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.1-3.2.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exiv2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exiv2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"exiv2-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-39.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-39.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gegl-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-39.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-color-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-3.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-color-manager-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-3.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnome-color-manager-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-3.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libgexiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libgexiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libgexiv2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"exiv2-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libgexiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libgexiv2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libgexiv2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libgexiv2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:8","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.2-5.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-39.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnome-color-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.28.0-3.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libgexiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-4.el8"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-12.18.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-2.1ubuntu16.04.4"}]}],"versions":["0.25-1ubuntu1","0.25-2.1","0.25-2.1ubuntu16.04.1","0.25-2.1ubuntu16.04.2","0.25-2.1ubuntu16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1ubuntu0.18.04.3"}]}],"versions":["0.25-3.1","0.25-3.1ubuntu0.18.04.1","0.25-3.1ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-2.1ubuntu16.04.4"}]}],"versions":["0.25-1ubuntu1","0.25-2.1","0.25-2.1ubuntu16.04.1","0.25-2.1ubuntu16.04.2","0.25-2.1ubuntu16.04.3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1ubuntu0.18.04.3"}]}],"versions":["0.25-3.1","0.25-3.1ubuntu0.18.04.1","0.25-3.1ubuntu0.18.04.2"],"bundled":7}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"exiv2","product":"exiv2"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/Exiv2/exiv2/issues/845","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://github.com/Exiv2/exiv2/pull/846","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://usn.ubuntu.com/4056-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13112","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/"},{"url":"https://github.com/advisories/GHSA-5w5r-cgx2-jf78"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-13112","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1577","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1531171","tags":["report"]},{"url":"https://bugzilla.redhat.com/1531724","tags":["report"]},{"url":"https://bugzilla.redhat.com/1566725","tags":["report"]},{"url":"https://bugzilla.redhat.com/1566731","tags":["report"]},{"url":"https://bugzilla.redhat.com/1566735","tags":["report"]},{"url":"https://bugzilla.redhat.com/1566737","tags":["report"]},{"url":"https://bugzilla.redhat.com/1579544","tags":["report"]},{"url":"https://bugzilla.redhat.com/1594627","tags":["report"]},{"url":"https://bugzilla.redhat.com/1609396","tags":["report"]},{"url":"https://bugzilla.redhat.com/1632481","tags":["report"]},{"url":"https://bugzilla.redhat.com/1632484","tags":["report"]},{"url":"https://bugzilla.redhat.com/1632490","tags":["report"]},{"url":"https://bugzilla.redhat.com/1635045","tags":["report"]},{"url":"https://bugzilla.redhat.com/1646555","tags":["report"]},{"url":"https://bugzilla.redhat.com/1649094","tags":["report"]},{"url":"https://bugzilla.redhat.com/1649101","tags":["report"]},{"url":"https://bugzilla.redhat.com/1651917","tags":["report"]},{"url":"https://bugzilla.redhat.com/1656187","tags":["report"]},{"url":"https://bugzilla.redhat.com/1656195","tags":["report"]},{"url":"https://bugzilla.redhat.com/1660423","tags":["report"]},{"url":"https://bugzilla.redhat.com/1660424","tags":["report"]},{"url":"https://bugzilla.redhat.com/1660425","tags":["report"]},{"url":"https://bugzilla.redhat.com/1660426","tags":["report"]},{"url":"https://bugzilla.redhat.com/1684381","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728484","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728488","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728490","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728492","tags":["report"]},{"url":"https://bugzilla.redhat.com/1728494","tags":["report"]},{"url":"https://bugzilla.redhat.com/1757444","tags":["report"]},{"url":"https://bugzilla.redhat.com/1757445","tags":["report"]},{"url":"https://bugzilla.redhat.com/1767748","tags":["report"]},{"url":"https://bugzilla.redhat.com/1800472","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1577.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2017-18005","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-10772","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-11037","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-14338","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-17229","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-17230","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-17282","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-17581","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-18915","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-19107","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-19108","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-19535","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-19607","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20096","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20097","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20098","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20099","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-4868","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-9303","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-9304","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-9305","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-9306","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13109","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13111","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13112","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13113","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-13114","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20421","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-9143","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13112","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0415.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25280","tags":["report"]},{"url":"https://usn.ubuntu.com/4159-1/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800472","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1577.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18005","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18005","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-4868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4868","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9303","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-9306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10772","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10772","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14338","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17229","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17229","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17230","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17230","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17282","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18915","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19107","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19107","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19535","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-19607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-19607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20098","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20099","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13109","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13109","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13109","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13111","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13111","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13111","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13112","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13112","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13113","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13113","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13114","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20421","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1577","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224252-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1119562","tags":["report"]},{"url":"https://bugzilla.suse.com/1142681","tags":["report"]},{"url":"https://bugzilla.suse.com/1185002","tags":["report"]},{"url":"https://bugzilla.suse.com/1186231","tags":["report"]},{"url":"https://bugzilla.suse.com/1188733","tags":["report"]},{"url":"https://bugzilla.suse.com/1189332","tags":["report"]},{"url":"https://bugzilla.suse.com/1189337","tags":["report"]},{"url":"https://bugzilla.suse.com/1189338","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37620","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-13112","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4056-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-19107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13114","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-13112","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T00:00:00Z","modified":"2024-08-04T23:41:10.105Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-4653","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T00:00:00Z","modified":"2024-08-04T23:41:10Z","updated_at":"2026-11-03T02:40:43.860719Z"}],"ghsa":[{"id":"GHSA-5w5r-cgx2-jf78","title":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an...","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2022-05-24T16:49:06Z","modified":"2023-02-03T05:01:31Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:52:59.998713Z"}],"nvd":[{"id":"CVE-2019-13112","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T23:15:10.16Z","modified":"2026-06-17T02:16:05.11Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"ALPINE-CVE-2019-13112","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T23:15:10.16Z","modified":"2026-11-03T06:31:49.522094668Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2019-13112","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T23:15:10.16Z","modified":"2026-10-20T10:50:41.281067731Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-13112","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T23:15:10.16Z","modified":"2026-09-21T07:02:17.46205852Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHSA-2020:1577","title":"Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:58:35Z","modified":"2026-06-27T10:09:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RLSA-2020:1577","title":"Moderate: exiv2 security, bug fix, and enhancement update","description":"The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.\n\nThe following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)\n\nSecurity Fix(es):\n\n* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)\n\n* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)\n\n* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)\n\n* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)\n\n* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)\n\n* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)\n\n* exiv2: information leak via a crafted file (CVE-2018-11037)\n\n* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)\n\n* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)\n\n* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)\n\n* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)\n\n* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)\n\n* exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)\n\n* exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)\n\n* exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)\n\n* exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)\n\n* exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)\n\n* exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)\n\n* exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)\n\n* exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)\n\n* exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)\n\n* exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)\n\n* exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)\n\n* exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)\n\n* exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)\n\n* exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)\n\n* exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T08:52:31Z","modified":"2026-02-05T10:00:10.583135Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-13112","description":"A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.","status":"published","published":"2019-06-30T00:00:00Z","modified":"2026-04-22T12:04:48.892019Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"ALSA-2020:1577","title":"Moderate: exiv2 security, bug fix, and enhancement update","description":"The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.\n\nThe following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)\n\nSecurity Fix(es):\n\n* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)\n\n* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)\n\n* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)\n\n* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)\n\n* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)\n\n* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)\n\n* exiv2: information leak via a crafted file (CVE-2018-11037)\n\n* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)\n\n* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)\n\n* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)\n\n* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)\n\n* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)\n\n* exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)\n\n* exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)\n\n* exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)\n\n* exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)\n\n* exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)\n\n* exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)\n\n* exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)\n\n* exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)\n\n* exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)\n\n* exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)\n\n* exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)\n\n* exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)\n\n* exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)\n\n* exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)\n\n* exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T08:52:31Z","modified":"2026-11-05T12:15:05.029652576Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"DLA-3265-1","title":"exiv2 - security update","status":"published","published":"2023-01-10T00:00:00Z","modified":"2026-03-09T01:18:16.024502Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2019-0415","title":"Updated exiv2 packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nAn integer overflow in Exiv2 through 0.27.1 allows an attacker to cause\na denial of service (SIGSEGV) via a crafted PNG image file, because \nPngImage::readMetadata mishandles a zero value for iccOffset.\n(CVE-2019-13108)\n\nAn integer overflow in Exiv2 through 0.27.1 allows an attacker to cause\na denial of service (SIGSEGV) via a crafted PNG image file, because\nPngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.\n(CVE-2019-13109)\n\nA CiffDirectory::readDirectory integer overflow and out-of-bounds read\nin Exiv2 through 0.27.1 allows an attacker to cause a denial of service\n(SIGSEGV) via a crafted CRW image file. (CVE-2019-13110)\n\nA PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2\nthrough 0.27.1 allows an attacker to cause a denial of service (crash\ndue to an std::bad_alloc exception) via a crafted PNG image file.\n(CVE-2019-13112)\n\nExiv2 through 0.27.1 allows an attacker to cause a denial of service\n(crash due to assertion failure) via an invalid data location in a\nCRW image file. (CVE-2019-13113)\n\nhttp.c in Exiv2 through 0.27.1 allows a malicious http server to cause a\ndenial of service (crash due to a NULL pointer dereference) by returning\na crafted response that lacks a space character. (CVE-2019-13114)\n\nExiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in\ntypes.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory\nin crwimage_int.cpp, because there is no validation of the relationship\nof the total size to the offset and size. (CVE-2019-17402)\n","status":"published","published":"2019-12-31T16:51:17Z","modified":"2026-04-16T04:44:24.278125687Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"SUSE-SU-2022:4252-1","title":"Security update for exiv2","description":"This update for exiv2 fixes the following issues:\n\n- CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of service. (bsc#1142681)\n- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read(). (bsc#1189332)\n- CVE-2021-34334: Fixed a DoS due to integer overflow in loop counter. (bsc#1189338)\n- CVE-2021-31291: Fixed a heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service via crafted metadata (bsc#1188733).\n- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).\n- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).\n- CVE-2021-29457: Fixed a heap buffer overflow when write metadata into a crafted image file (bsc#1185002).\n- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).\n","status":"published","published":"2022-11-28T10:22:53Z","modified":"2026-02-04T03:20:41.969268Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-4056-1","title":"exiv2 vulnerabilities","description":"It was discovered that Exiv2 incorrectly handled certain PSD files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2018-19107, CVE-2018-19108)\n\nIt was discovered that Exiv2 incorrectly handled certain PNG files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2018-19535, CVE-2019-13112)\n\nIt was discovered that Exiv2 incorrectly handled certain CRW files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2019-13110, CVE-2019-13113)\n\nIt was discovered that incorrectly handled certain HTTP requests.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2019-13114)\n","status":"published","published":"2019-07-15T13:25:13Z","modified":"2026-04-22T09:59:01.849239Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}