CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

• CWE-119

• https://bugzilla.redhat.com/show_bug.cgi?id=1494780Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00004.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3852-1/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1494780Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00004.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3852-1/Third Party Advisory

Published

Sep 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14852An insecure communication was found between a user and the O…8.6
• CVE-2017-14853The Orpak SiteOmat OrCU component is vulnerable to code inje…8.6
• CVE-2017-14854A stack buffer overflow exists in one of the Orpak SiteOmat …9.1
• CVE-2017-14855Red Lion HMI panels allow remote attackers to cause a denial…
• CVE-2017-14857In Exiv2 0.26, there is an invalid free in the Image class i…
• CVE-2017-14858There is a heap-based buffer overflow in the Exiv2::l2Data f…
• CVE-2017-1486IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and…
• CVE-2017-14860There is a heap-based buffer over-read in the Exiv2::Jp2Imag…
• CVE-2017-14861There is a stack consumption vulnerability in the Exiv2::Int…
• CVE-2017-14862An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14863A NULL pointer dereference was discovered in Exiv2::Image::p…
• CVE-2017-14864An Invalid memory address dereference was discovered in Exiv…5.5