CVE-2019-13504: Medium severity exiv2 vulnerability
Published Jul 11, 2019
·Updated
There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.
Affected Software
3 affected components
exiv2 exiv2<=0.27.2
Debian Debian Linux=8.0
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Jul 11, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-13504?
CVE-2019-13504 is classified as a moderate-severity vulnerability due to its potential impact on software stability.
2
How do I fix CVE-2019-13504?
To fix CVE-2019-13504, upgrade Exiv2 to version 0.27.3 or later, which contains the necessary patches.
3
What type of vulnerability is CVE-2019-13504?
CVE-2019-13504 is an out-of-bounds read vulnerability found in the readMetadata function of the Exiv2 library.
4
Which software versions are affected by CVE-2019-13504?
CVE-2019-13504 affects Exiv2 versions up to and including 0.27.2 and specific Debian Linux versions including 8.0 and 10.0.
5
How does CVE-2019-13504 affect users?
CVE-2019-13504 can lead to application crashes or unintended behavior by allowing the reading of memory outside the intended boundaries.