Lucene search

K
mageiaGentoo FoundationMGASA-2022-0420
HistoryNov 13, 2022 - 5:25 a.m.

Updated exiv2 packages fix security vulnerability

2022-11-1305:25:20
Gentoo Foundation
advisories.mageia.org
15
exiv2
integer overflow
quicktime video handler
security vulnerability
remote attack
cve-2022-3756
unix

0 Low

EPSS

Percentile

0.0%

Affected is the function QuickTimeVideo::userDataDecoder of the file quicktimevideo.cpp of the component QuickTime Video Handler. The manipulation leads to integer overflow. It is possible to launch the attack remotely. (CVE-2022-3756)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchexiv2< 0.27.3-1.5exiv2-0.27.3-1.5.mga8