Beveiligingsadvies

CVE-2021-3482

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-04-08 22:06:42
Laatst bijgewerkt 2024-08-03 16:53:17
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.