← All advisories

Medium severity6.5OSV Advisory· Published May 12, 2018· Updated Jun 17, 2026

CVE-2018-10999

CVE-2018-10999

Description

An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Exiv2/Exiv2OSV2 versions
v0.10, v0.11, v0.12, …+ 1 more
- (no CPE)range: v0.10, v0.11, v0.12, …
- (no CPE)range: =0.26

Patches

Vulnerability mechanics

References

6

github.com/Exiv2/exiv2/issues/306nvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2018/06/msg00010.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2018/10/msg00012.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/201811-14nvdThird Party Advisory
usn.ubuntu.com/3700-1/nvdThird Party Advisory
www.debian.org/security/2018/dsa-4238nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.