PT-2019-20119

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.2 Description The issue allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage int.cpp. This is due to the lack of validation of the...

PT-2018-19195

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to excessive stack consumption due to a recursive function in CiffDirectory::readDirectory at crwimage int.cpp, leading to a denial of service. Recommendations For Exiv2 version 0.26, conside...