CVE-2020-19716

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.1

Description A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 leads to a denial of service. The vulnerability is related to copying a buffer without checking the input data, allowing a remote attacker to cause a denial of service.

Recommendations For Exiv2 version 0.27.1, consider disabling the Databuf function in types.cpp as a temporary workaround until a patch is available. Restrict access to the types.cpp component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.