1 matches found
AZL-7217 CVE-2021-3482 affecting package exiv2 for versions less than 0.27.5-1
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...