{"action":"Upgrade exiv2 to 0.24-4.1 or later.","affected":[{"fixed":"0.24-4.1","introduced":"0"}],"component":"exiv2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.24-4.1"],"id":"tcs_01M5NB0SS4A329JFD49VC0966J","modified_at":"2026-10-23T15:47:37.754725767Z","published_at":"2015-01-02T20:59:08.647Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-9449","https://security-tracker.debian.org/tracker/CVE-2014-9449"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-9449","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-9449"}],"summary":"Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file."}