CVE-2017-11683

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp. This can lead to a remote denial of service attack via crafted input. The vulnerability is associated with insufficient use of the assert() function, allowing a remote attacker to cause a denial of service.

Recommendations For Exiv2 version 0.26, consider applying a patch or fix that addresses the reachable assertion in the Internal::TiffReader::visitDirectory function to prevent remote denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.