Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2018-9145: Exiv2 can crash when given excessively large data
CVE-2018-9145 · published 8 years ago
Summary
The Exiv2 image library version 0.26 may stop unexpectedly if it receives a request to allocate an unusually large memory buffer. This can cause the program to abort, potentially disrupting image processing tasks. Update to a newer version of Exiv2 or avoid processing files that trigger the large allocation.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| exiv2 | exiv2 |
0.26 cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:* |
Original advisory text
In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory a...
In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the 4-DataBuf-abort-1 PoC file.
References
- https://bugzilla.novell.com/show_bug.cgi?id=1087879 Issue Tracking Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1564281 Issue Tracking Third Party Advisory
- https://github.com/xiaoqx/pocs/tree/master/exiv2 Exploit Third Party Advisory
- https://security.gentoo.org/glsa/201811-14 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-20Improper Input Validation
Timeline
Published30 Mar 2018
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-9145 · NVD
Track software like this
Free during beta