CVE-2024-25112

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function, QuickTimeVideo::multipleEntriesDecoder, was new in v0.28.0, so Exiv2 versions before v0.28 are not affected. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted video file. This bug is fixed in version v0.28.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Database specific

{
    "cwe_ids": [
        "CWE-400",
        "CWE-674"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25112.json",
    "cna_assigner": "GitHub_M",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": ">= 0.28.0 < 0.28.2"
                },
                {
                    "last_affected": ">= 0.28.0 < 0.28.2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/exiv2/exiv2

Affected ranges

Type

GIT

Repo

https://github.com/exiv2/exiv2

Events

Introduced

931a40a746f5678dcc4625b06a2eb25fa4f00b34

Fixed

28fa956ea9b3ff8c3ada1330bf196e451ba06a05

Database specific

{
    "cpe": [
        "cpe:2.3:a:exiv2:exiv2:0.28.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:exiv2:exiv2:0.28.1:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "v0.28"
        },
        {
            "introduced": "0.28.0"
        },
        {
            "last_affected": "0.28.0"
        },
        {
            "introduced": "0.28.1"
        },
        {
            "last_affected": "0.28.1"
        }
    ],
    "source": [
        "DESCRIPTION",
        "CPE_STRING"
    ]
}

Affected versions

0.*

0.28.0

0.28.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-25112.json"