CVE-2017-14866

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Exiv2 Exiv2::s2Data function heap buffer overflow vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in the Exiv2::s2Data function in types.cpp in Exiv2, which could allow an attacker to cause a denial of service via specially crafted input...