Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46853
HistoryMay 13, 2024 - 6:49 a.m.

Uncontrolled Recursion

2024-05-1306:49:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
exiv2
uncontrolled recursion
vulnerability
bigtiffimage.

7 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

Exiv2 is vulnerable to an Uncontrolled Recursion. The vulnerability is due to faulty handling of directory offsets in bigtiffimage.cpp, allowing an infinite loop through recursive function calls when processing specially crafted TIFF files.

CPENameOperatorVersion
libexiv2.sole0.27.2
libexiv2.sole0.27.2

7 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%