CVE-2017-14859

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to an invalid memory address dereference in the Exiv2::StringValueBase::read function in value.cpp of the Exiv2 library. This can cause a segmentation fault and application crash, leading to denial of service. The vulnerability can be exploited by a remote attacker.

Recommendations For Exiv2 version 0.26, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the invalid memory address dereference in the Exiv2::StringValueBase::read function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.