https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:37:55 +0000 https://vulnerability.circl.lu/vuln/cve-2021-3482 <p><strong>Affected:</strong> exiv2</p> <p>A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.</p> <p><strong>Affected:</strong> exiv2</p> <p>A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.</p> https://vulnerability.circl.lu/vuln/cve-2021-3482 https://vulnerability.circl.lu/vuln/usn-4941-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: exiv2, Ubuntu:18.04:LTS: exiv2, Ubuntu:20.04:LTS: exiv2</p> <p>It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-29457)</p> <p>It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-29458, CVE-2021-29470)</p> <p>It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-3482)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: exiv2, Ubuntu:18.04:LTS: exiv2, Ubuntu:20.04:LTS: exiv2</p> <p>It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-29457)</p> <p>It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-29458, CVE-2021-29470)</p> <p>It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-3482)</p> https://vulnerability.circl.lu/vuln/usn-4941-1