Lucene search

K
osvGoogleOSV:RLSA-2021:3152
HistoryAug 16, 2021 - 9:08 a.m.

Important: exiv2 security update

2021-08-1609:08:01
Google
osv.dev
9
exiv2
security update
c++ library
image metadata
cve-2021-31291
heap-based buffer overflow
vulnerability
jp2image.cpp

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

64.3%

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.

Security Fix(es):

  • exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.