CVE-2021-34334

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to v0.27.5

Description The issue is related to an infinite loop triggered when Exiv2 is used to read the metadata of a crafted image file. This could potentially be exploited by an attacker to cause a denial of service if they can trick the victim into running Exiv2 on a crafted image file. The vulnerability allows a remote attacker to cause a denial of service using a specially crafted image file.

Recommendations For versions prior to v0.27.5, update to version v0.27.5 to resolve the issue. As a temporary workaround, consider avoiding the use of Exiv2 to read metadata from untrusted image files until the update is applied.