6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.7%
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
bugzilla.redhat.com/show_bug.cgi?id=1494467
lists.debian.org/debian-lts-announce/2023/01/msg00004.html
usn.ubuntu.com/3852-1/