Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-18005.json"