almalinux/gegl

Vulnerabilities (29)

• CVE-2026-2050HigJun 24, 2026
  affected < 0.2.0-40.el8_10fixed 0.2.0-40.el8_10

  GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a

• CVE-2019-20421HigJan 27, 2020
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

• CVE-2019-13114MedJun 30, 2019
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.

• CVE-2019-13113MedJun 30, 2019
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file.

• CVE-2019-13112MedJun 30, 2019
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.

• CVE-2019-13111MedJun 30, 2019
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.

• CVE-2019-13109MedJun 30, 2019
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.

• CVE-2019-9143HigFeb 25, 2019
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

• CVE-2018-20099MedDec 12, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

• CVE-2018-20098MedDec 12, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

• CVE-2018-20097MedDec 12, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

• CVE-2018-20096MedDec 12, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

• CVE-2018-19607MedNov 27, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

• CVE-2018-19535MedNov 26, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.

• CVE-2018-19108MedNov 8, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.

• CVE-2018-19107MedNov 8, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.

• CVE-2018-18915MedNov 3, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.

• CVE-2018-17581MedSep 28, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.

• CVE-2018-17282MedSep 20, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

• CVE-2018-17230MedSep 19, 2018
  affected < 0.2.0-39.el8fixed 0.2.0-39.el8

  Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.