### [CVE-2018-9144](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9144) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure. ### POC #### Reference - https://github.com/xiaoqx/pocs/tree/master/exiv2 - https://github.com/xiaoqx/pocs/tree/master/exiv2 #### Github - https://github.com/andir/nixos-issue-db-example - https://github.com/xiaoqx/pocs