Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-61799
HistoryAug 10, 2021 - 12:00 a.m.

Exiv2 null pointer dereference vulnerability (CNVD-2021-61799)

2021-08-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
exiv2
vulnerability
null pointer
denial of service
image files
cnvd-2021-61799

EPSS

0.001

Percentile

33.8%

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via specially crafted image files.