CVE-2019-13504
Fixed in a distro release EPSS 2%
There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.
Products: exiv2, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | exiv2 | 0.25-4+deb10u4 |
| Debian 12 | exiv2 | 0.27.2-6 |
| Debian 13 | exiv2 | 0.27.2-6 |
| Debian 14 | exiv2 | 0.27.2-6 |
| Debian 8 | exiv2 | 0.24-4.1+deb8u4 |