Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Exiv2 输入验证错误漏洞
Vulnerability Description
Exiv2是Andreas Huggel个人开发者的一套用于管理图像元数据的C++库和命令行应用程序。该产品提供了读取和写入EXIF、IPTC和XMP等多种格式图像元数据的功能。 Exiv2 exiv2存在输入验证错误漏洞，该漏洞源于Exiv2 0.27.3版本 的 CrwMap::encode0x1810 中的整数溢出。利用该漏洞允许攻击者通过精心设计的元数据触发基于堆的缓冲区溢出并导致拒绝服务 (DOS)。
CVSS Information
N/A
Vulnerability Type
N/A