PYSEC-2018-117

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

PT-2018-15256

Name of the Vulnerable Software and Affected Versions Exiv2 versions 0.27-RC3 Description A heap-based buffer over-read issue exists in the Exiv2::tEXtToDataBuf function of pngimage.cpp. This can be exploited by a crafted input, leading to a remote denial of service attack. Recommendations For...