CVE-2017-14861

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp. A crafted input can lead to a remote denial of service attack.

Recommendations For Exiv2 version 0.26, consider restricting the use of the Exiv2::Internal::stringFormat function until a patch is available. As a temporary workaround, avoid using the function with crafted inputs to minimize the risk of a denial of service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.