ROS-20221009-01

A vulnerability in the Exiv2 image metadata management library and command-line utility is related to the
QuickTimeVideo::userDataDecoder function of the quicktimevideo.cpp file of the QuickTime Video Handler component.
Exploitation of the vulnerability could allow an attacker acting remotely to cause an integer
overflow and perform a denial of service attack

A vulnerability in the Exiv2 image metadata management library and command-line utility is related to the
QuickTimeVideo::userDataDecoder function of the quicktimevideo.cpp file of the QuickTime Video Handler component.
Exploitation of the vulnerability could allow an attacker acting remotely to cause the dereferencing of the
null pointer and execute arbitrary code

A vulnerability in the Exiv2 image metadata management library and command-line utility is related to the
QuickTimeVideo::decodeBlock function of the quicktimevideo.cpp file of the QuickTime Video Handler component.
Exploitation of the vulnerability could allow an attacker acting remotely to cause dereferencing of the
a null pointer and cause a denial of service attack

A vulnerability in the Exiv2 image metadata management library and command-line utility is related to the
QuickTimeVideo::userDataDecoder function of the quicktimevideo.cpp file of the QuickTime Video Handler component.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a buffer overflow
heap buffer overflow and perform a denial of service attack

A vulnerability in the Exiv2 image metadata management library and command-line utility is related to the
BmffImage::boxHandler function of the bmffimage.cpp file. Exploitation of the vulnerability could allow an attacker,
acting remotely, to cause memory corruption and trigger a denial of service attack

A vulnerability in the Exiv2 image metadata management library and command-line utility is related to the
QuickTimeVideo::decodeBlock function of the quicktimevideo.cpp file of the QuickTime Video Handler component.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a buffer overflow and
execute arbitrary code