cve/2019/CVE-2019-17402.md

CVE-2019-17402

Description

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.

POC

Reference

• https://github.com/Exiv2/exiv2/issues/1019
• https://github.com/Exiv2/exiv2/issues/1019

Github

• https://github.com/ARPSyndicate/cvemon