Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-19535
6.5
MEDIUMCVSS v3
Published
November 26, 2018
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
GitHub