CVE-2018-14046

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to a heap-based buffer over-read in the WebPImage::decodeChunks function located in webpimage.cpp. This indicates a problem with how the Exiv2 library handles certain WebP image chunks, potentially leading to memory access issues.

Recommendations For Exiv2 version 0.26, consider applying a patch or fix that addresses the heap-based buffer over-read in the WebPImage::decodeChunks function to prevent potential memory access issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.