CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3

published December 12, 2018

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02762 · 86.2th percentile
Published
2018-12-12T08:00Z
EPSS history
Timeline
  • 12 DEC 08:00Z
    There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3
    cvelistv5