Heap-based Buffer Over-read Vulnerability in libexiv2 in Exiv2 0.26

CVE-2017-12957 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

Learn more about our Web Application Penetration Testing UK.