Buffer Overflow

2021-05-0607:12:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

JSON

exiv2 is vulnerable to buffer overflow. The vulnerability exists due to improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.

CPENameOperatorVersion
exiv2:3.13eq0.27.3-r0
exiv2:edgeeq0.27.2-r5
exiv2:edgeeq0.27.2-r6
exiv2:edgeeq0.27.3-r0
exiv2:focaleq0.27.2-8ubuntu2
exiv2:bioniceq0.25-3.1ubuntu0.18.04.5
exiv2:bustereq0.25-4+deb10u1
exiv2:stretcheq0.25-3.1+deb9u2
exiv2eq0.26__10.el8
exiv2eq0.27.3__5.el8

Name	Operator	Version
exiv2:3.13	eq	0.27.3-r0
exiv2:edge	eq	0.27.2-r5
exiv2:edge	eq	0.27.2-r6
exiv2:edge	eq	0.27.3-r0
exiv2:focal	eq	0.27.2-8ubuntu2
exiv2:bionic	eq	0.25-3.1ubuntu0.18.04.5
exiv2:buster	eq	0.25-4+deb10u1
exiv2:stretch	eq	0.25-3.1+deb9u2
exiv2	eq	0.26__10.el8
exiv2	eq	0.27.3__5.el8