CVE-2017-14860

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.

• CWE-125

• https://bugzilla.redhat.com/show_bug.cgi?id=1494776Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1494776Exploit, Issue Tracking, Third Party Advisory

Published

Sep 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14854A stack buffer overflow exists in one of the Orpak SiteOmat …9.1
• CVE-2017-14855Red Lion HMI panels allow remote attackers to cause a denial…
• CVE-2017-14857In Exiv2 0.26, there is an invalid free in the Image class i…
• CVE-2017-14858There is a heap-based buffer overflow in the Exiv2::l2Data f…
• CVE-2017-14859An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-1486IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and…
• CVE-2017-14861There is a stack consumption vulnerability in the Exiv2::Int…
• CVE-2017-14862An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14863A NULL pointer dereference was discovered in Exiv2::Image::p…
• CVE-2017-14864An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14865There is a heap-based buffer overflow in the Exiv2::us2Data …
• CVE-2017-14866There is a heap-based buffer overflow in the Exiv2::s2Data f…