CVE-2018-17229

MEDIUM

Exiv2 v0.26 - Heap-Based Buffer Overflow in Exiv2::d2Data

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-17229. PoCs published by zeeshangondal.

AI-analyzed exploit summary The provided code is a partial implementation of Exiv2 library components but lacks exploit-specific logic for CVE-2018-17229. It appears to be a stub or dependency file rather than a functional PoC.

Description

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.

Exploits (1)

nomisec STUB
by zeeshangondal · poc
https://github.com/zeeshangondal/c-cpp_CVE-2018-17229

The provided code is a partial implementation of Exiv2 library components but lacks exploit-specific logic for CVE-2018-17229. It appears to be a stub or dependency file rather than a functional PoC.

Classification
Stub 90%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Exiv2 (version not specified)
No auth needed
Prerequisites: None identified in the provided code
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/Exiv2/exiv2/issues/453

Scores

CVSS v3 6.5
EPSS 0.0190
EPSS Percentile 77.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
exiv2/exiv2 0.26
Published Sep 19, 2018
Tracked Since Feb 18, 2026