Lucene search

K
osvGoogleOSV:CVE-2021-3482
HistoryApr 08, 2021 - 11:15 p.m.

CVE-2021-3482

2021-04-0823:15:12
Google
osv.dev
6
exiv2
heap-based buffer overflow
jpg image
crafted
exif data
vulnerability

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.