NetSight
high7.8

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

Impact

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

Affected products

VendorProductAffected versions
Exiv2Exiv2
Version 0.27.99.0

Weakness classification

References