Summary
It was discovered that Exempi incorrectly handled certain media files. If a
user or automated system were tricked into opening a specially crafted
file, a remote attacker could cause Exempi to stop responding or crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | exempi | 2.4.5-2ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | exempi | 2.5.1-1ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | exempi | 2.5.2-1ubuntu0.22.04.1 |
Vulnerabilities 22
-
High 7.8
XMP Toolkit SDK TIFF_MemoryReader::SortIFD function Memory Corruption
XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
-
High 7.8
XMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a cr…
-
High 7.8
XMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a cr…
-
High 7.8
XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
-
High 7.8
XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-cra…
-
High 7.8
XMPToolkit SDK ImportTIFF_CheckStandardMapping Memory Corruption
XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
-
High 7.8
XMP Toolkit SDK Use After Free Vulnerability In ReadingXMPNewDOM Could Lead To Arbitrary Code Execution
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…
-
High 7.8
XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malic…
-
High 7.8
XMP Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a c…
-
High 7.8
XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a …
-
High 7.8
XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a …
-
High 7.8
XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a …
-
High 7.8
XMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a …
-
Medium 6.1
XMP Toolkit SDK Null Pointer Dereference
XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is requ…
-
Medium 5.5
XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
-
Medium 5.5
XMP Toolkit SDK Integer Overflow Vulnerability Could Result In Application Denial Of Service
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a …
-
Medium 5.5
XMP Toolkit SDK SVG_Adapter Out-of-bounds Read Information Disclosure
XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue …
-
Medium 5.5
XMP-Toolkit Null Pointer Dereference Application denial-of-service
XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the cu…
-
Low 3.3
XMP Toolkit SDK Out-of-bounds Read Vulnerability In PostScriptSupport::ConvertToDate Could Lead To Information Exposure
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r…
-
Low 3.3
XMP Toolkit SDK Out-of-bounds Read Vulnerability In FindAndReadXMPChunk Could Lead To Information Exposure
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r…
-
Low 3.3
XMP Toolkit SDK Heap-based Buffer Overflow in the PSD_MetaHandler::CacheFileData Could Lead To Application Denial Of Service
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a cr…
-
Unscored —
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer derefer…
References
-
report
https://ubuntu.com/security/CVE-2018-12648
-
report
https://ubuntu.com/security/CVE-2021-36045
-
report
https://ubuntu.com/security/CVE-2021-36046
-
report
https://ubuntu.com/security/CVE-2021-36047
-
report
https://ubuntu.com/security/CVE-2021-36048
-
report
https://ubuntu.com/security/CVE-2021-36050
-
report
https://ubuntu.com/security/CVE-2021-36051
-
report
https://ubuntu.com/security/CVE-2021-36052
-
report
https://ubuntu.com/security/CVE-2021-36053
-
report
https://ubuntu.com/security/CVE-2021-36054
-
report
https://ubuntu.com/security/CVE-2021-36055
-
report
https://ubuntu.com/security/CVE-2021-36056
-
report
https://ubuntu.com/security/CVE-2021-36058
-
report
https://ubuntu.com/security/CVE-2021-36064
-
report
https://ubuntu.com/security/CVE-2021-39847
-
report
https://ubuntu.com/security/CVE-2021-40716
-
report
https://ubuntu.com/security/CVE-2021-40732
-
report
https://ubuntu.com/security/CVE-2021-42528
-
report
https://ubuntu.com/security/CVE-2021-42529
-
report
https://ubuntu.com/security/CVE-2021-42530
-
report
https://ubuntu.com/security/CVE-2021-42531
-
report
https://ubuntu.com/security/CVE-2021-42532