CVE-2018-5772

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file.

• CWE-674

• http://www.securityfocus.com/bid/102789Third Party Advisory, VDB Entry
• https://github.com/Exiv2/exiv2/issues/216Exploit, Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201811-14Third Party Advisory
• http://www.securityfocus.com/bid/102789Third Party Advisory, VDB Entry
• https://github.com/Exiv2/exiv2/issues/216Exploit, Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201811-14Third Party Advisory

Published

Jan 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5763An issue was discovered in OXID eShop Enterprise Edition bef…
• CVE-2018-5764The parse_arguments function in options.c in rsyncd in rsync…7.5
• CVE-2018-5766In Libav through 12.2, there is an invalid memcpy in the av_…
• CVE-2018-5767An issue was discovered on Tenda AC15 V15.03.1.16_multi devi…
• CVE-2018-5768A remote, unauthenticated attacker can gain remote code exec…
• CVE-2018-5770An issue was discovered on Tenda AC15 devices. A remote, una…
• CVE-2018-5773An issue was discovered in markdown2 (aka python-markdown2) …
• CVE-2018-5776WordPress before 4.9.2 has XSS in the Flash fallback files i…
• CVE-2018-5777An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5778An issue was discovered in Ipswitch WhatsUp Gold before 2017…
• CVE-2018-5779A vulnerability in the conferencing component of Mitel Conne…
• CVE-2018-5780A vulnerability in the conferencing component of Mitel Conne…