cve/2018/CVE-2018-9144.md

CVE-2018-9144

Description

In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure.

POC

Reference

• https://github.com/xiaoqx/pocs/tree/master/exiv2
• https://github.com/xiaoqx/pocs/tree/master/exiv2

Github

• https://github.com/andir/nixos-issue-db-example
• https://github.com/xiaoqx/pocs