CVE-2019-14370

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0

Description The issue is related to an out-of-bounds read in the Exiv2::MrwImage::readMetadata() function in mrwimage.cpp. This could result in a denial of service. The vulnerability can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial of service.

Recommendations For Exiv2 version 0.27.99.0, consider disabling the readMetadata() function as a temporary workaround until a patch is available. Restrict access to the mrwimage.cpp component to minimize the risk of exploitation. Avoid using the Exiv2::MrwImage::readMetadata() function with untrusted input files until the issue is resolved.