CVE-2021-37620

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier

Description The issue is related to an out-of-bounds read in the Exiv2 library, which can be triggered when reading the metadata of a specially crafted image file. This could potentially allow a remote attacker to cause a denial of service. The library is used for managing metadata of image files.

Recommendations For Exiv2 versions v0.27.4 and earlier, update to version v0.27.5 to resolve the issue.