openexif_project CVE Vulnerabilities & CVE List (5)

Products (CPE): — CVEs: 5

openexif_project vulnerability overview

Aggregates CVE and security vulnerability intelligence across all openexif_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Historical issues mainly involve vendor risk buffer overflow and vendor risk denial of service and related problems; some flaws may lead to vendor impact application crash and vendor impact memory corruption.

Vulnerability distribution trend (last 24 months)

Showing 15 of 5 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2017-14931 ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted JPEG file. [email protected] 5.5 0.17% 2017-09-30 2026-05-13
CVE-2017-11118 The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file. [email protected] 5.5 0.26% 2017-07-31 2026-05-13
CVE-2017-11117 The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file. [email protected] 5.5 0.17% 2017-07-31 2026-05-13
CVE-2017-11116 The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file. [email protected] 7.8 0.28% 2017-07-31 2026-05-13
CVE-2017-11115 The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted jpg file. [email protected] 5.5 0.27% 2017-07-31 2026-05-13
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence