CVE-2020-18771
Fixed in a distro release EPSS 2%
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.
Products: exiv2, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | exiv2 | 0.27.1-1 |
| Debian 10 | exiv2 | 0.25-4+deb10u4 |
| Debian 12 | exiv2 | 0.27.2-6 |
| Debian 13 | exiv2 | 0.27.2-6 |
| Debian 14 | exiv2 | 0.27.2-6 |
| Ubuntu 22.04 LTS | exiv2 | 0.27.5-3ubuntu1.1 |
| Ubuntu 24.04 LTS | exiv2 | 0.27.6-1ubuntu0.1 |
| Ubuntu 25.10 | exiv2 | 0.28.5+dfsg-1ubuntu0.1 |
| Ubuntu Pro 16.04 LTS | exiv2 | 0.25-2.1ubuntu16.04.7+esm5 |
| Ubuntu Pro 18.04 LTS | exiv2 | 0.25-3.1ubuntu0.18.04.11+esm1 |
| Ubuntu Pro 20.04 LTS | exiv2 | 0.27.2-8ubuntu2.7+esm1 |