CVE-2017-9239

An issue was discovered in Exiv2 0.26

published May 26, 2017

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02633 · 85.3th percentile
Published
2017-05-26T10:00Z
EPSS history
Timeline
  • 26 MAY 10:00Z
    An issue was discovered in Exiv2 0.26
    cvelistv5