Exempi Project Exempi vulnerabilities
35 known vulnerabilities affecting exempi_project/exempi.
Total CVEs
35
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH16MEDIUM16LOW3
Vulnerabilities
Page 1 of 2
CVE-2021-36050P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36050 [HIGH] CVE-2021-36050: XMP Toolkit SDK version 2020
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-36055P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36055 [HIGH] CVE-2021-36055: XMP Toolkit SDK versions 2020
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
osv
CVE-2021-36051P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-10-04
CVE-2021-36051 [HIGH] CVE-2021-36051: XMP Toolkit SDK version 2020
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file.
osv
CVE-2021-36064P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36064 [HIGH] CVE-2021-36064: XMP Toolkit version 2020
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
osv
CVE-2021-39847P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-39847 [HIGH] CVE-2021-39847: XMP Toolkit SDK version 2020
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-42531P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12022-05-02
CVE-2021-42531 [HIGH] CVE-2021-42531: XMP Toolkit SDK version 2021
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-42529P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12022-05-02
CVE-2021-42529 [HIGH] CVE-2021-42529: XMP Toolkit SDK version 2021
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-42530P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12022-05-02
CVE-2021-42530 [HIGH] CVE-2021-42530: XMP Toolkit SDK version 2021
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-42532P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12022-05-02
CVE-2021-42532 [HIGH] CVE-2021-42532: XMP Toolkit SDK version 2021
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-36052P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36052 [HIGH] CVE-2021-36052: XMP Toolkit version 2020
XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
osv
CVE-2021-36056P3HIGHCVSS 7.3≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36056 [HIGH] CVE-2021-36056: XMP Toolkit SDK version 2020
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-36047P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36047 [HIGH] CVE-2021-36047: XMP Toolkit SDK version 2020
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-36048P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36048 [HIGH] CVE-2021-36048: XMP Toolkit SDK version 2020
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
osv
CVE-2021-36046P3HIGHCVSS 7.8≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-01
CVE-2021-36046 [HIGH] CVE-2021-36046: XMP Toolkit version 2020
XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
osv
CVE-2017-18234P4HIGHCVSS 7.8fixed in 2.4.32018-03-15
CVE-2017-18234 [HIGH] CWE-416 CVE-2017-18234: An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of serv
An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp, and XMPFi
nvdosv
CVE-2018-12648P4HIGHCVSS 7.5v2.4.52018-06-22
CVE-2018-12648 [HIGH] CWE-476 CVE-2018-12648: The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a N
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.
nvdosv
CVE-2020-18652P4MEDIUMCVSS 6.5≤ 2.5.02023-08-22
CVE-2020-18652 [MEDIUM] CWE-787 CVE-2020-18652: Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attacker
Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.
nvdosv
CVE-2021-40716P4MEDIUMCVSS 5.5≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-09-29
CVE-2021-40716 [MEDIUM] CVE-2021-40716: XMP Toolkit SDK versions 2021
XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
osv
CVE-2020-18651P4MEDIUMCVSS 6.5≤ 2.5.02023-08-22
CVE-2020-18651 [MEDIUM] CWE-787 CVE-2020-18651: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and
Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.
nvdosv
CVE-2021-40732P4MEDIUMCVSS 6.1≥ 0, < 2.5.2-1+deb11u1≥ 0, < 2.6.0-12021-10-13
CVE-2021-40732 [MEDIUM] CVE-2021-40732: XMP Toolkit version 2020
XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.
osv
1 / 2Next →