CVE-2018-20098

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3

published December 12, 2018

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02567 · 85.0th percentile
Published
2018-12-12T08:00Z
EPSS history
Timeline
  • 12 DEC 08:00Z
    There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3
    cvelistv5