3 matches found
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. The vulnerability exists Databuf function of rafimage.cpp due to a null pointer dereference which allows an attacker to crash the application via malicious input...
CVE-2019-14368
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...
CVE-2019-14368
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() (rafimage.cpp). The CVE-2019-14368 entry is corroborated across NVD, Red Hat/SUSE advisories, and CNVD; exploitation details, affected products/versions beyond 0.27.99.0 are not provided in the connected document...