In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "exiv2" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "exiv2-dbgsym" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "libexiv2-14" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "libexiv2-14-dbgsym" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "libexiv2-dbg" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "libexiv2-dev" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "libexiv2-dev-dbgsym" }, { "binary_version": "0.25-2.1ubuntu16.04.4", "binary_name": "libexiv2-doc" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.25-3.1ubuntu0.18.04.3", "binary_name": "exiv2" }, { "binary_version": "0.25-3.1ubuntu0.18.04.3", "binary_name": "libexiv2-14" }, { "binary_version": "0.25-3.1ubuntu0.18.04.3", "binary_name": "libexiv2-dbg" }, { "binary_version": "0.25-3.1ubuntu0.18.04.3", "binary_name": "libexiv2-dev" }, { "binary_version": "0.25-3.1ubuntu0.18.04.3", "binary_name": "libexiv2-doc" } ] }