CVE-2017-17723

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp

published February 12, 2018

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01800 · 78.3th percentile
Published
2018-02-12T22:00Z
EPSS history
Timeline
  • 12 FEB 22:00Z
    In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp
    cvelistv5