EPSS
Percentile
73.7%
libexiv2.so is vulnerable to denial of service. An attacker is able to crash the process by entering a malicious input to the function Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp which results in a heap-based buffer over-read.
Exiv2::Jp2Image::encodeJp2Header
jp2image.cpp
access.redhat.com/errata/RHSA-2019:2101
github.com/Exiv2/exiv2/issues/590
github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206
lists.fedoraproject.org/archives/list/[email protected]/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/