Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2

...

UBUNTU-CVE-2021-37616

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

The vulnerability of the jp2image.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the jp2image.cpp component in the Exiv2 metadata management library is related to incorrect error handling. Exploiting this vulnerability may allow a malicious actor to trigger a service failure SIGABRT by calling the Safe::add function remotely...