Debian/exiv2: high 7.5
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
Action: Upgrade exiv2 to 0.27.3-3.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.3-3.1 | - |
Fixed versions
| 0.27.3-3.1 |
Sources
- osv: DEBIAN-CVE-2021-31292#Debian:13/exiv2
- https://security-tracker.debian.org/tracker/CVE-2021-31292
published · modified · JSON