{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"exiv2","cve_ids":["CVE-2017-9239"],"ecosystem":"PyPI","epss":0.02633,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KG72AY6Z0RJSH1MQWCQHGQ","modified_at":"2025-10-09T05:26:46.691972Z","published_at":"2017-05-26T10:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-112","http://dev.exiv2.org/issues/1295","http://www.securityfocus.com/bid/98720","https://usn.ubuntu.com/3852-1/","http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html","https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2017-112","url":"https://osv.dev/vulnerability/PYSEC-2017-112"}],"summary":"An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage wil"}