VYPR
Medium severity6.5OSV Advisory· Published May 12, 2018· Updated Jun 17, 2026

CVE-2018-10999

CVE-2018-10999

Description

An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Exiv2/Exiv2OSV3 versions
    v0.10, v0.11, v0.12, …+ 2 more
    • (no CPE)range: v0.10, v0.11, v0.12, …
    • cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*
    • (no CPE)range: =0.26
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.