PT-2018-19191 · Exiv2 · Exiv2

Publicado 2018-07-17 · Atualizado 2018-07-17

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to the misuse of the realpath function in the example code of Exiv2 on POSIX platforms, excluding Apple platforms where glibc is not used. This misuse could potentially lead to a buffer overflow.

Recommendations For Exiv2 version 0.26, consider applying a patch or modification to correctly use the realpath function on affected POSIX platforms to prevent potential buffer overflow issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

PYSEC-2018-134

Produtos afetados

Exiv2

Referências · 2

• https://github.com/Exiv2/exiv2/issues/382 · Nota
• https://osv.dev/vulnerability/PYSEC-2018-134 · Aviso do Fabricante