Veracode Vulnerability DatabaseVERACODE:21110Buffer Overflows
0.002 Low
EPSS
Percentile
61.3%
Exiv2 is vulnerable to buffer overflows. It is due to lack of proper memory handling in WebPImage::decodeChunks in webpimage.cpp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| exiv2 | eq | 0.26__3.el7.0.1 | |
| exiv2 | eq | 0.26__3.el7 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
access.redhat.com/errata/RHSA-2019:2101
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=1465061
bugzilla.redhat.com/show_bug.cgi?id=1470729
bugzilla.redhat.com/show_bug.cgi?id=1470737
bugzilla.redhat.com/show_bug.cgi?id=1470913
bugzilla.redhat.com/show_bug.cgi?id=1470946
bugzilla.redhat.com/show_bug.cgi?id=1470950
bugzilla.redhat.com/show_bug.cgi?id=1471772
bugzilla.redhat.com/show_bug.cgi?id=1473888
bugzilla.redhat.com/show_bug.cgi?id=1473889
bugzilla.redhat.com/show_bug.cgi?id=1475123
bugzilla.redhat.com/show_bug.cgi?id=1475124
bugzilla.redhat.com/show_bug.cgi?id=1482295
bugzilla.redhat.com/show_bug.cgi?id=1482296
bugzilla.redhat.com/show_bug.cgi?id=1482423
bugzilla.redhat.com/show_bug.cgi?id=1494443
bugzilla.redhat.com/show_bug.cgi?id=1494467
bugzilla.redhat.com/show_bug.cgi?id=1494776
bugzilla.redhat.com/show_bug.cgi?id=1494778
bugzilla.redhat.com/show_bug.cgi?id=1494780
bugzilla.redhat.com/show_bug.cgi?id=1494781
bugzilla.redhat.com/show_bug.cgi?id=1494782
bugzilla.redhat.com/show_bug.cgi?id=1494786
bugzilla.redhat.com/show_bug.cgi?id=1494787
bugzilla.redhat.com/show_bug.cgi?id=1495043
bugzilla.redhat.com/show_bug.cgi?id=1524104
bugzilla.redhat.com/show_bug.cgi?id=1524107
bugzilla.redhat.com/show_bug.cgi?id=1524116
bugzilla.redhat.com/show_bug.cgi?id=1525055
bugzilla.redhat.com/show_bug.cgi?id=1537353
bugzilla.redhat.com/show_bug.cgi?id=1566260
bugzilla.redhat.com/show_bug.cgi?id=1652637
bugzilla.redhat.com/show_bug.cgi?id=1664361
github.com/Exiv2/exiv2/issues/378
Related
