medium6.5
CVE-2018-16336
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image …
Impact
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exiv2 | Exiv2 | Version 0.26 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 18.04, 18.10 |
| Debian | Debian Linux | Version 8.0 |