CVE-2019-13111

Name of the Vulnerable Software and Affected Versions Exiv2 versions 0.27.1 and earlier

Description The issue is related to an integer overflow in the WebPImage::decodeChunks function, which can be triggered by a crafted WEBP image file. This can cause a denial of service due to a large heap allocation followed by a very long running loop.

Recommendations For Exiv2 versions 0.27.1 and earlier, update to a version later than 0.27.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.