Exiv2 0.26 vulnerabilities

There is a heap-based buffer overflow in Exiv2 version 0.26 in basicio.cpp. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.

There is a floating point exception in the Exiv2::ValueType function in Exiv2 version 0.26 that can lead to a remote denial of service attack via crafted input.

There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service.

Exiv2 version 0.26 has an invalid free in Image::printIFDStructure that leads to a segmentation fault. Crafted input can lead to a remote denial of service attack.