exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

PT-2018-3866 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27-RC3 Description: The issue is related to a buffer overflow in the tiffimage int.cpp component of the Exiv2 library, which can lead to a remote denial of service attack when a crafted input is processed. This can cause a SEG...