CVE-2018-10780 — Out-of-bounds Read in Exiv2

CWE-125 — Out-of-bounds ReadCWE-122 — Heap-based Buffer Overflow6 documents5 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 53.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Exiv2Debian Exiv2
Timeline
PublishedMay 7
Latest updateMay 13

Description

Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDexiv2/exiv20.26
▶debiandebian/exiv2

🔴Vulnerability Details

1
GHSA
GHSA-v22h-x6qx-4mwj: Exiv2::Image::byteSwap2 in image↗2022-05-13
▶

📋Vendor Advisories

2
Red Hat
exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap2 function in image.cpp↗2018-05-05
▶
Debian
CVE-2018-10780: exiv2 - Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-...↗2018
▶

💬Community

2
Bugzilla
CVE-2018-10780 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap2 function in image.cpp↗2018-05-11
▶
Bugzilla
CVE-2018-10780 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap2 function in image.cpp [fedora-all]↗2018-05-11
▶