Heap-Based Buffer Overflow in Exiv2 Affects Multiple Linux Distributions
CVE-2018-11531

9.8CRITICAL

Key Information:

Vendor: Exiv2
Status: Exiv2
Vendor: CVE Published:; 29 May 2018

What is CVE-2018-11531?

Exiv2 version 0.26 is susceptible to a heap-based buffer overflow within the 'getData' function, located in preview.cpp. This vulnerability can lead to potential exploitation, allowing an attacker to execute arbitrary code through crafted input that triggers the overflow. The issue impacts multiple Linux distributions, making it critical for users to apply patches or updates to mitigate the risks associated with this vulnerability. Security advisories from various Linux distributions including Ubuntu, Debian, and Gentoo recommend immediate attention to this flaw.