NetSight
IP …
high7.5

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via cr…

Impact

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.

Affected products

VendorProductAffected versions
Exiv2Exiv2
Version 0.27.3
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Versions 33, 34

Weakness classification

CWE-190

References