CVE-2018-20096

Name of the Vulnerable Software and Affected Versions Exiv2 versions 0.27-RC3

Description A heap-based buffer over-read issue exists in the Exiv2::tEXtToDataBuf function of pngimage.cpp. This can be exploited by a crafted input, leading to a remote denial of service attack.

Recommendations For Exiv2 version 0.27-RC3, consider applying a patch or fix that addresses the heap-based buffer over-read issue in the Exiv2::tEXtToDataBuf function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.