4 matches found
SUSE CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
6.5CVSS8.9AI score0.01203EPSS
SaveExploits1References4
CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
6.5CVSS7.6AI score
SaveExploits0References2
CVE-2019-14369
CVE-2019-14369 : Exiv2 0.27.99.0’s PngImage::readMetadata() (pngimage.cpp) allows a crafted PNG image to trigger a heap-based buffer over-read, leading to a denial of service. Public documents corroborate this impact and indicate fixes in Exiv2 release 0.27.4 (and related patches in downstream di...
6.5CVSS6.2AI score0.01203EPSS
SaveExploits1References2Affected Software1
20