← All advisories

Medium severity6.5NVD Advisory· Published Sep 19, 2018· Updated Jun 17, 2026

CVE-2018-17229

CVE-2018-17229

Description

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

Exiv2/Exiv2llm-fuzzy
Range: =0.26
osv-coords9 versions
pkg:rpm/almalinux/exiv2-devel pkg:rpm/almalinux/exiv2-doc pkg:rpm/almalinux/gegl pkg:rpm/almalinux/gnome-color-manager pkg:rpm/almalinux/libgexiv2 pkg:rpm/almalinux/libgexiv2-devel pkg:rpm/opensuse/exiv2&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/exiv2&distro=openSUSE%20Tumbleweed pkg:rpm/suse/exiv2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1
< 0.27.2-5.el8+ 8 more
- (no CPE)range: < 0.27.2-5.el8
- (no CPE)range: < 0.27.2-5.el8
- (no CPE)range: < 0.2.0-39.el8
- (no CPE)range: < 3.28.0-3.el8
- (no CPE)range: < 0.10.8-4.el8
- (no CPE)range: < 0.10.8-4.el8
- (no CPE)range: < 0.26-lp151.7.3.1
- (no CPE)range: < 0.27.5-4.1
- (no CPE)range: < 0.26-6.8.1

Patches

Vulnerability mechanics

References

2

github.com/Exiv2/exiv2/issues/453nvdExploitThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.htmlnvd

News mentions

0

No linked articles in our index yet.