Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-14860
4.3
MEDIUMCVSS v2
Published
September 29, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
GitHub