Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder

概要

参考情報

• Exiv2/exiv2 security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-25112 · ADVISORY
• Exiv2/exiv2#2337 · WEB
• Exiv2/exiv2 · PACKAGE
• pypa/advisory-database · WEB

exiv2 のその他の脆弱性

• CVE-2025-55304中 5.5Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-serv…
• CVE-2025-54080中 5.5Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds…
• CVE-2025-26623緊急 9.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer ov…
• CVE-2024-24826中 5.0Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds …
• CVE-2023-44398高 8.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds…