CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

• CWE-476

• https://bugzilla.redhat.com/show_bug.cgi?id=1494443Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1494443Exploit, Issue Tracking, Third Party Advisory

Published

Sep 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14858There is a heap-based buffer overflow in the Exiv2::l2Data f…
• CVE-2017-14859An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-1486IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and…
• CVE-2017-14860There is a heap-based buffer over-read in the Exiv2::Jp2Imag…
• CVE-2017-14861There is a stack consumption vulnerability in the Exiv2::Int…
• CVE-2017-14862An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14864An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14865There is a heap-based buffer overflow in the Exiv2::us2Data …
• CVE-2017-14866There is a heap-based buffer overflow in the Exiv2::s2Data f…
• CVE-2017-14867Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.…
• CVE-2017-14868Restlet Framework before 2.3.11, when using SimpleXMLProvide…
• CVE-2017-14869In Android for MSM, Firefox OS for MSM, QRD Android, with al…