CVE-2018-9145
N/A
Published: March 30, 2018 at 08:00 AM UTC
Updated: June 17, 2026 at 02:06 AM UTC
1 product affected across 1 vendorExiv2
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the 4-DataBuf-abort-1 PoC file.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
x_refsource_MISCIssue TrackingThird Party Advisory
Source: [email protected]
https://bugzilla.novell.com/show_bug.cgi?id=1087879x_refsource_MISCIssue TrackingThird Party Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1564281x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://github.com/xiaoqx/pocs/tree/master/exiv2Vendor Advisoryx_refsource_GENTOOThird Party Advisory
Source: [email protected]
https://security.gentoo.org/glsa/201811-14Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card