CVE-2018-19607 — exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp

Back Back to CVE browser

MEDIUM

exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp

Published Nov 27, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 2.52%

Description

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

Affected products

Red Hat Enterprise Linux 7

exiv2-0:0.27.0-2.el7_6

Fixed · RHSA-2019:2101
Red Hat Enterprise Linux 8

exiv2-0:0.27.2-5.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 8

gegl-0:0.2.0-39.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 8

gnome-color-manager-0:3.28.0-3.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 8

libgexiv2-0:0.10.8-4.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 6

exiv2

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	exiv2-0:0.27.0-2.el7_6	Fixed	RHSA-2019:2101
Red Hat Enterprise Linux 8	exiv2-0:0.27.2-5.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 8	gegl-0:0.2.0-39.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 8	gnome-color-manager-0:3.28.0-3.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 8	libgexiv2-0:0.10.8-4.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 6	exiv2	Not affected	n/a

Remediation

Red Hat statement

This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 7. This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise 6.

Metrics

2.52% 0.02516

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02516

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.52% (0.02516)	84.25th	v5 (v2026.06.15)
Jun 15, 2026	2.17% (0.02170)	79.86th	v5 (v2026.06.15)
Mar 17, 2025	0.68% (0.00676)	69.80th	v4 (v2025.03.14)
Dec 17, 2024	0.26% (0.00264)	65.20th	v3 (v2023.03.01)
Feb 8, 2024	0.40% (0.00397)	72.82th	v3 (v2023.03.01)
Nov 21, 2023	0.40% (0.00397)	70.62th	v3 (v2023.03.01)
Mar 7, 2023	0.35% (0.00346)	67.13th	v3 (v2023.03.01)
Mar 6, 2023	1.14% (0.01136)	59.45th	v2 (v2022.01.01)
Oct 18, 2022	1.14% (0.01136)	58.28th	v2 (v2022.01.01)
Apr 1, 2022	1.14% (0.01136)	56.27th	v2 (v2022.01.01)
Feb 4, 2022	1.14% (0.01136)	34.23th	v2 (v2022.01.01)
Feb 3, 2022	1.30% (0.01300)	31.12th	v1
Jan 6, 2022	1.30% (0.01300)	30.48th	v1
Sep 1, 2021	1.30% (0.01300)	69.44th	v1
Apr 14, 2021	1.30% (0.01300)	0.00th	v1

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (7)

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2101
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2018-19607
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1656195
Issue Tracking
https://github.com/Exiv2/exiv2/issues/561
x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-19607
https://www.cve.org/CVERecord?id=CVE-2018-19607

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html		vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2101		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2018-19607		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1656195		Issue Tracking
https://github.com/Exiv2/exiv2/issues/561		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-19607
https://www.cve.org/CVERecord?id=CVE-2018-19607