Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-9144

Fixed in a distro release EPSS 2%

In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure.

Published 2018-03-30 · CVE record · OSV

Products: exiv2

Distro releases

ReleasePackageFixed in
Debian 12exiv20.27.2-6
Debian 13exiv20.27.2-6
Debian 14exiv20.27.2-6