Описание
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
exiv2 | not-affected | package |
Примечания
https://github.com/Exiv2/exiv2/issues/378
https://github.com/D4N/exiv2/commit/49bfe84b4b7277cc425572fb68db23c8820181c1
EPSS
Процентиль: 60%
0.00396
Низкий
Связанные уязвимости
CVSS3: 8.8
ubuntu
около 7 лет назад
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
CVSS3: 3.3
redhat
около 7 лет назад
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
CVSS3: 8.8
nvd
около 7 лет назад
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
CVSS3: 8.8
github
около 3 лет назад
Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
oracle-oval
почти 6 лет назад
ELSA-2019-2101: exiv2 security, bug fix, and enhancement update (LOW)
EPSS
Процентиль: 60%
0.00396
Низкий