SUSE CVE-2018-10958

In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call...

The vulnerability of the types.cpp component in the Exiv2 media metadata management library, which allows a hacker to cause a service failure.

The vulnerability of the types.cpp component in the Exiv2 metadata management library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure SIGABRT by calling the...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. Passing a large size value to the application causes a SIGABRT signal during the Exiv2::Internal::PngChunk::zlibUncompress function call through types.cpp, leading to the application crashing...