PT-2018-12453

CVE-2018-14338

·

Published

2018-07-14

·

Updated

2020-04-28

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26
Description The issue is related to the misuse of the realpath function in the example code of Exiv2 on POSIX platforms, excluding Apple platforms where glibc is not used. This could potentially lead to a buffer overflow.
Recommendations For Exiv2 version 0.26, consider applying a patch or fix to correctly use the realpath function to prevent potential buffer overflow issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2020:1577
ALT-PU-2019-2468
ALT-PU-2019-2590
CESA-2020_1577
RHSA-2020:1577
RHSA-2020_1577
RLSA-2020:1577
Found an issue in the description? Have something to add? Feel free to write us 👾