CVE-2017-17669

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk int.cpp. This can be exploited by a crafted PNG file, potentially leading to a remote denial of service attack. The vulnerability is associated with a buffer overflow, which may allow a remote attacker to cause a service disruption.

Recommendations For Exiv2 version 0.26, consider applying a patch or fix that addresses the heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.