CVE-2018-10772

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

CVE-2018-10772

CVE-2018-10772 affects Exiv2’s pngimage.cpp tEXtToDataBuf() and is described as an out-of-bounds read that can crash the application when processing a crafted PNG text chunk (DoS). Public advisories reference Exiv2 up to 0.27.x and show fixes in 0.27.2 across distributions (e.g., MiracleLinux, Or...