CVE-2018-19535

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer…

published November 26, 2018

CVSS
—
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02087 · 81.4th percentile
Published
2018-11-26T00:00Z
EPSS history
Timeline
  • 26 NOV 00:00Z
    In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer…
    cvelistv5