CVE-2017-17723

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26

Description: The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function, which can be exploited by remote attackers using a crafted TIFF file. This can lead to the disclosure of memory data or cause a denial of service.

Recommendations: For Exiv2 version 0.26, consider avoiding the use of the Exiv2::Image::byteSwap4 function until a patch is available. As a temporary workaround, restrict the processing of crafted TIFF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.