Buffer Overflow

2022-11-0105:54:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libexiv2 buffer overflow

quicktimevideo userdatadecoder

integer overflow

0 Low

EPSS

Percentile

0.0%

JSON

libexiv2.so is vulnerable to buffer overflow. The vulnerability exists in the QuickTimeVideo::userDataDecoder function in quicktimevideo.cpp where the resulting value will always be larger than the original value allowing an attacker to cause an application crash through an integer overflow by providing a malicious input.

CPENameOperatorVersion
libexiv2.sole26.0.0
libexiv2.sole0.27.5
exiv2:bustereq0.25-4+deb10u1
libexiv2.sole26.0.0
libexiv2.sole0.27.5
exiv2:bustereq0.25-4+deb10u1