Required CVE Record Information
Description
An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
References 3 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- https://bugzilla.redhat.com/show_bug.cgi?id=1494786 x_transferred
- usn.ubuntu.com: USN-3852-1 vendor-advisoryx_transferred
- lists.debian.org: [debian-lts-announce] 20230110 [SECURITY] [DLA 3265-1] exiv2 security update mailing-listx_transferred