← All advisories

Medium severity6.5NVD Advisory· Published Apr 4, 2018· Updated Jun 17, 2026

CVE-2018-9304

CVE-2018-9304

Description

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Exiv2/Exiv2llm-fuzzy
Range: =0.26
osv-coords6 versions
pkg:rpm/almalinux/exiv2-devel pkg:rpm/almalinux/exiv2-doc pkg:rpm/almalinux/gegl pkg:rpm/almalinux/gnome-color-manager pkg:rpm/almalinux/libgexiv2 pkg:rpm/almalinux/libgexiv2-devel
< 0.27.2-5.el8+ 5 more
- (no CPE)range: < 0.27.2-5.el8
- (no CPE)range: < 0.27.2-5.el8
- (no CPE)range: < 0.2.0-39.el8
- (no CPE)range: < 3.28.0-3.el8
- (no CPE)range: < 0.10.8-4.el8
- (no CPE)range: < 0.10.8-4.el8

Patches

Vulnerability mechanics

References

3

github.com/Exiv2/exiv2/issues/262nvdExploitIssue TrackingPatch
github.com/xiaoqx/pocs/blob/master/exiv2/readme.mdnvdExploitThird Party Advisory
security.gentoo.org/glsa/201811-14nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.