Lucene search
Veracode Vulnerability DatabaseVERACODE:20944HistoryAug 02, 2019 - 4:29 a.m.
Buffer Over-read
2019-08-0204:29:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
39.1%
libexiv2.so is vulnerable to buffer over-read. The function RafImage::readMetadata in rafimage.cpp ignores the buffer size when reading metadata of raf images which can lead to an out-of-bounds read.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libexiv2.so | le | 26.0.0 | |
| libexiv2.so | le | 26.0.0 |
References
Related
redhatcve
redhatcve
CVE-2019-14368
2019-08-30 00:58:07
debiancve
debiancve
CVE-2019-14368
2019-07-28 19:15:10
cve
cve
CVE-2019-14368
2019-07-28 19:15:10
prion
prion
Heap overflow
2019-07-28 19:15:00
cvelist
cvelist
CVE-2019-14368
2019-07-28 18:43:40
nvd
nvd
CVE-2019-14368
2019-07-28 19:15:10
ubuntucve
ubuntucve
CVE-2019-14368
2019-07-28 00:00:00
nessus
nessus
RHEL 6 : exiv2 (Unpatched Vulnerability)
2024-05-11 00:00:00