REDHAT-BUG-1590993: Integer Overflow

Published Jun 13, 2018

Updated

A flaw was found in Exiv2 0.26. An integer overflow in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp.

References: https://github.com/Exiv2/exiv2/issues/366 https://github.com/TeamSeri0us/pocs/blob/master/exiv2/2-out-of-read-Poc

Patch: https://github.com/Exiv2/exiv2/commit/341de4500ab993103c215bfb07d43d4a08654ac4

Affected Software

1 affected component

exiv2 exiv2

Event History

Jun 13, 2018

Data Sourced

via Red Hat·09:20 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1590993?

The severity of REDHAT-BUG-1590993 is considered high due to the potential for out-of-bounds reads.

How do I fix REDHAT-BUG-1590993?

To fix REDHAT-BUG-1590993, update Exiv2 to the latest version where the vulnerability has been patched.

What causes the vulnerability in REDHAT-BUG-1590993?

REDHAT-BUG-1590993 is caused by an integer overflow in the LoaderTiff::getData() function, which leads to out-of-bounds reads.

Which versions of Exiv2 are affected by REDHAT-BUG-1590993?

Exiv2 version 0.26 is specifically affected by the vulnerability identified in REDHAT-BUG-1590993.

What are the potential impacts of REDHAT-BUG-1590993?

The potential impacts of REDHAT-BUG-1590993 include crashes or unauthorized access to memory, which could lead to data leaks.