Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Description

References

• Exiv2/exiv2 security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-24826 · ADVISORY
• Exiv2/exiv2#2337 · WEB
• Exiv2/exiv2 · PACKAGE
• pypa/advisory-database · WEB

exiv2 的其他漏洞

• CVE-2025-55304中危 5.5Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-serv…
• CVE-2025-54080中危 5.5Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds…
• CVE-2025-26623严重 9.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer ov…
• CVE-2024-25112中危 5.0Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-servi…
• CVE-2023-44398高危 8.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds…