Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-14369

Fixed in a distro release EPSS 1%

Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file.

Published 2019-07-28 · CVE record · OSV

Products: exiv2, debian_linux

Distro releases

ReleasePackageFixed in
Debian 10exiv20.25-4+deb10u4
Debian 12exiv20.27.2-6
Debian 13exiv20.27.2-6
Debian 14exiv20.27.2-6