Buffer Overflow Vulnerability in Exiv2 by Exiv2
CVE-2018-14338

8.1HIGH

Key Information:

Vendor

Exiv2

Status
Exiv2
Vendor
CVE Published:
17 July 2018

What is CVE-2018-14338?

The Exiv2 image library version 0.26 contains a buffer overflow vulnerability due to improper handling of the realpath function in the sample code. This issue affects POSIX platforms that do not use glibc, potentially allowing attackers to exploit this flaw and execute arbitrary code or cause a denial of service. Users are advised to review the documentation and update to the latest secure version to mitigate the risk.

References

https://github.com/Exiv2/exiv2/issues/382
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.