CVE-2017-18005

MEDIUM

Exiv2 0.26 - Null Pointer Dereference in DataValue::toLong

Title source: llm

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.

Core 2

Core References

Exploit, Issue Tracking, Third Party Advisory

Mailing List, Third Party Advisory mailing-list

CVSS v3 5.5

EPSS 0.0079

EPSS Percentile 51.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-476

Status published

Products (2)

debian/debian_linux 10.0

exiv2/exiv2 0.26

Published Dec 31, 2017

Tracked Since Feb 18, 2026