CVE-2021-31292

Published: Jul 26, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/Exiv2/exiv2/issues/1530

DSA-4958

vendor-advisory

FEDORA-2021-399f869889

vendor-advisory

FEDORA-2021-cbaef8e2d5

vendor-advisory

[debian-lts-announce] 20210830 [SECURITY] [DLA 2750-1] exiv2 security update

mailing-list

GLSA-202312-06

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-31292

Description

Affected Products

References