CVE-2019-13112

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.27.2

Description The issue is related to an uncontrolled memory allocation in the PngChunk::parseChunkContent function of the Exiv2 library, which can be exploited by an attacker to cause a denial of service via a crafted PNG image file. This can lead to a crash due to an std::bad alloc exception.

Recommendations For Exiv2 versions prior to 0.27.2, update to version 0.27.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the PngChunk::parseChunkContent function to minimize the risk of exploitation.