CVE-2019-20421

In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption

published January 27, 2020

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04296 · 91.1th percentile
Published
2020-01-27T04:22Z
EPSS history
Timeline
  • 27 JAN 04:22Z
    In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption
    cvelistv5