CVE-2019-20421

Exiv2 0.27.2 contains a vulnerability in Jp2Image::readMetadata() where processing certain input files can loop indefinitely, consuming CPU and enabling a remote DoS via a crafted file. Public advisories from Debian, AlmaLinux, Alpine, Mageia and others indicate fixed releases in or after 0.27.2;...