Lucene search

K
osvGoogleOSV:RLSA-2021:3153
HistoryAug 16, 2021 - 9:08 a.m.

Important: compat-exiv2-026 security update

2021-08-1609:08:17
Google
osv.dev
8
exiv2 library
image metadata
security update
buffer overflow
cve-2021-31291
cvss score
software

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

64.3%

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.

Security Fix(es):

  • exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.