Denial of Service Vulnerability in Exiv2 Image Processing Software

CVE-2019-9144

What is CVE-2019-9144?

A vulnerability has been identified in Exiv2 version 0.27 that allows an attacker to exploit infinite recursion within the BigTiffImage::printIFD function, which is located in the file bigtiffimage.cpp. By crafting a specific file, an attacker can trigger this issue, potentially leading to a Denial of Service condition due to segmentation faults. Additionally, the exploit may have unspecified implications, necessitating immediate attention to ensure system security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References