CVE-2017-18005: Null Pointer Dereference

First published: Sun Dec 31 2017(Updated: )

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a malformed TIFF file. The vulnerability causes a segmentation fault. [UPSTREAM BUG] <a href="https://github.com/Exiv2/exiv2/issues/168">https://github.com/Exiv2/exiv2/issues/168</a> [UPSTREAM PATCH] <a href="https://github.com/Exiv2/exiv2/pull/199">https://github.com/Exiv2/exiv2/pull/199</a>

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2017-18005
• collector/mitre-cve
• source/MITRE
• agent/references
• agent/severity
• agent/author
• agent/last-modified-date
• agent/weakness
• agent/tags
• agent/description
• agent/first-publish-date
• agent/softwarecombine
• agent/event
• vendor/exiv2
• canonical/exiv2 exiv2
• version/exiv2 exiv2/0.26
• vendor/debian
• canonical/debian debian linux
• version/debian debian linux/10.0