← All advisories

High severity8.8NVD Advisory· Published Jun 13, 2018· Updated Jun 17, 2026

CVE-2018-12265

CVE-2018-12265

Description

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Exiv2/Exiv2llm-fuzzy
Range: =0.26
osv-coords2 versions
pkg:rpm/opensuse/exiv2&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/exiv2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1
< 0.26-lp151.7.3.1+ 1 more
- (no CPE)range: < 0.26-lp151.7.3.1
- (no CPE)range: < 0.26-6.8.1

Patches

Vulnerability mechanics

References

8

github.com/Exiv2/exiv2/issues/365nvdExploitThird Party Advisory
github.com/TeamSeri0us/pocs/blob/master/exiv2/1-out-of-read-PocnvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2018/06/msg00010.htmlnvdThird Party Advisory
security.gentoo.org/glsa/201811-14nvdThird Party Advisory
usn.ubuntu.com/3700-1/nvdThird Party Advisory
www.debian.org/security/2018/dsa-4238nvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.htmlnvd
access.redhat.com/errata/RHSA-2019:2101nvd

News mentions

0

No linked articles in our index yet.