PT-2022-5399 · Exiv2+1 · Exiv2+1

Published

2022-07-06

·

Updated

2023-02-06

·

CVE-2022-3717

CVSS v2.0

9.3

High

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Exiv2 (affected versions not specified)
Description The issue is related to the function BmffImage::boxHandler of the file bmffimage.cpp in the Exiv2 library and command-line utility for managing image metadata. It is associated with a buffer overflow in memory, which can lead to memory corruption. Exploitation of this issue may allow a remote attacker to cause a denial-of-service attack.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-399CWE-122CWE-119

Related Identifiers

BDU:2022-06482
BDU:2022-06713
BDU:2023-00732
CVE-2022-3717

Affected Products

Exiv2
Red Os