CVE-2018-4868

MEDIUM

Exiv2 0.26 - Denial of Service via Excessive Memory Allocation in Jp2Image::readMetadata

Title source: llm

Description

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.

References (2)

Core 2

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/Exiv2/exiv2/issues/202

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102477

Scores

CVSS v3 5.5

EPSS 0.0149

EPSS Percentile 70.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-770

Status published

Products (1)

exiv2/exiv2 0.26

Published Jan 03, 2018

Tracked Since Feb 18, 2026