CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

PT-2018-2292 · Exiv2 +3 · Exiv2 +3

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer overflow in the getData function, located in preview.cpp, which can be exploited by a remote attacker using a specially crafted malicious file. This could potentially...