FreeBSD : exiv2 -- Out-of-bounds read in AsfVideo::streamProperties (3e44c35f-6cf4-11ef-b813-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3e44c35f-6cf4-11ef-b813-4ccc6adda413 advisory. Kevin Backhouse reports: An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is...

OSV-2024-340 Heap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68210 Crash type: Heap-buffer-overflow READ 8 Crash state: Exiv2::AsfVideo::GUIDTag::GUIDTag Exiv2::AsfVideo::streamProperties Exiv2::AsfVideo::decodeBlock...

exiv2 -- Out-of-bounds read in AsfVideo::streamProperties

Kevin Backhouse reports: An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0, so Exiv2 versions before v0.28 are not affected. The out-of-bounds read is triggered when Exiv2 is used to read the...