CVE-2023-44398
1 advisory.
PyPI/exiv2 CVE-2023-44398: high 8.8, EPSS 0.97%
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable fu
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2023-233
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-hrw9-ggg3-3r4r
- https://github.com/Exiv2/exiv2/commit/e884a0955359107f4031c74a07406df7e99929a5
CVE-2023-44398 · published · modified · JSON