CVE-2020-18831
Fixed in a distro release EPSS <1%
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
Products: exiv2
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| PyPI | exiv2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | exiv2 | 0.27.0-4.amzn2.0.3 |
| Amazon Linux 2 | exiv2-devel | 0.27.0-4.amzn2.0.3 |
| Amazon Linux 2 | exiv2-doc | 0.27.0-4.amzn2.0.3 |
| Amazon Linux 2 | exiv2-libs | 0.27.0-4.amzn2.0.3 |
| Debian 12 | exiv2 | 0.27.2-6 |
| Debian 13 | exiv2 | 0.27.2-6 |
| Debian 14 | exiv2 | 0.27.2-6 |