CVE-2021-32617

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.3 and earlier

Description The issue is related to an inefficient algorithm with quadratic complexity in Exiv2, which can be triggered when writing metadata into a crafted image file. This could potentially allow an attacker to cause a denial of service if they can trick the victim into running Exiv2 on a crafted image file. The bug is only triggered when writing metadata, a less frequently used operation than reading metadata.

Recommendations For Exiv2 versions v0.27.3 and earlier, update to version v0.27.4 to resolve the issue. As a temporary workaround, consider avoiding the use of Exiv2 for writing metadata into image files until the update is applied.