Out-of-bounds read In exiv2
Description
[REJECTED CVE] A vulnerability has been found in Exiv2. This vulnerability affects the function QuickTimeVideo::userDataDecoder of the file quicktimevideo.cpp of the component QuickTime Video Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package |
|---|---|
 rpm rhel6 | |
rpm rhel7 | |
rpm rhel7 | |
rpm rhel7 |
Aliases
1. 2. 3.