SUSE CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...