Exiv2 0.27.2 allows attackers to... CVE-2019-17402

4.3 AV AC AU C I A
发布： 2019-10-09
修订： 2023-01-13

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有7条受影响产品信息