OpenExif 'ExifImageFile::readDHT' Function Denial of Service Vulnerability

OpenExif is an object-oriented library for accessing image files in Exif format. A security vulnerability exists in the 'ExifImageFile::readDHT' function of the ExifImageFileRead.cpp file in OpenExif version 2.1.4. A remote attacker can exploit this vulnerability to cause a denial of service heap...

Heap overflow

The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...

CVE-2017-11117

The vulnerability tracked as CVE-2017-11117 affects OpenExif 2.1.4. The issue resides in ExifImageFileRead.cpp, function ExifImageFile::readDHT, where a crafted JPEG can trigger a heap-based over-read, leading to an application crash and denial of service. This is triggered by remote input via a ...