Denial of Service Vulnerability in Exiv2 Image Processing Software

CVE-2019-9144

What is CVE-2019-9144?

A vulnerability has been identified in Exiv2 version 0.27 that allows an attacker to exploit infinite recursion within the BigTiffImage::printIFD function, which is located in the file bigtiffimage.cpp. By crafting a specific file, an attacker can trigger this issue, potentially leading to a Denial of Service condition due to segmentation faults. Additionally, the exploit may have unspecified implications, necessitating immediate attention to ensure system security.

References