Description
An issue was discovered in Exiv2 0.26. When the data structure of the
structure ifd is incorrect, the program assigns pValue_ to 0x0, and the
value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value
of pValue() to cause a segmentation fault. To exploit this vulnerability,
someone must open a crafted tiff file.
Package
| Upstream: | released
(0.25-3.1)
|
| Ubuntu 18.04 LTS: | not-affected
(0.25-3.1)
|
| Ubuntu 16.04 ESM: | released
(0.25-2.1ubuntu16.04.3)
|
| Ubuntu 14.04 ESM: | DNE
(trusty was released [0.23-1ubuntu2.2])
|
Patches:
Updated: 2022-04-13 13:05:30 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)