CVE-2018-12265

Public on 2018-06-13

Modified on 2019-10-24

Description

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.

Severity

Low

See what this means

CVSS v3 Base Score

3.3

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 2 - Core	exiv2	2019-10-21	ALAS2-2019-1339	Fixed

	Score Type	Score	Vector
Amazon Linux	CVSSv3	3.3	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L