Exiv2 输入验证错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An integer overflow vulnerability exists in CrwMap::encode0x1810 in Exiv2 version 0.27.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

PT-2021-4584 · Exiv2 +8 · Exiv2 +8

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.3 Description: The issue is related to an integer overflow in the CrwMap::encode0x1810 function of Exiv2, which can be exploited by attackers to trigger a heap-based buffer overflow, causing a denial of service DOS via...