CVE-2020-18898

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27

Description The issue is related to a stack exhaustion problem in the printIFDStructure function of the Exiv2 library. This allows a remote attacker to cause a denial of service (DOS) by using a specially crafted file. The exploitation of this issue can lead to a service disruption.

Recommendations For Exiv2 version 0.27, consider disabling the printIFDStructure function as a temporary workaround until a patch is available. Restrict access to the Exiv2 library to minimize the risk of exploitation. Avoid using the Exiv2 library with untrusted files until the issue is resolved.