CVE-2019-17402

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in…

published October 9, 2019

CVSS
—
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01851 · 79.0th percentile
Published
2019-10-09T00:00Z
EPSS history
Timeline
  • 09 OCT 00:00Z
    Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in…
    cvelistv5