There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12956.json"