CVE-2021-3482CWE-20

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1

published April 8, 2021

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02295 · 83.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-04-08T22:06Z
EPSS history
Timeline
  • 08 APR 22:06Z
    A flaw was found in Exiv2 in versions before and including 0.27.4-RC1
    cvelistv5