The vulnerability of the DataBuf function data(subBox.length-sizeof(box)) in the image.cpp component of the Exiv2 metadata management library, which allows a hacker to cause a service failure.

The vulnerability of the DataBuf function datasubBox.length-sizeofbox in the image.cpp component of the Exiv2 metadata management library is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...