CVE-2017-9239

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description An issue in the handling of the ifd structure can lead to a segmentation fault when a crafted tiff file is opened, potentially causing the program to crash. The issue arises when the data structure of the ifd is incorrect, resulting in the assignment of pValue to 0x0, and subsequently, the value of pValue() is 0x0. This value is then used by TiffImageEntry::doWriteImage, leading to the segmentation fault.

Recommendations For Exiv2 version 0.26, consider avoiding the use of crafted tiff files until a patch is available. As a temporary workaround, restrict the opening of tiff files from untrusted sources to minimize the risk of exploitation.