Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0

Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata() function, located in the rafimage.cpp file.

Recommendations For Exiv2 version 0.27.99.0, consider avoiding the use of the readMetadata() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.