CVE-2024-25112

MEDIUM

Exiv2 0.28.0-0.28.1 - Denial of Service via Unbounded Recursion in QuickTimeVideo::multipleEntriesDecoder

Title source: llm

Description

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function, `QuickTimeVideo::multipleEntriesDecoder`, was new in v0.28.0, so Exiv2 versions before v0.28 are _not_ affected. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted video file. This bug is fixed in version v0.28.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://github.com/Exiv2/exiv2/security/advisories/GHSA-crmj-qh74-2r36

Patch x_refsource_misc

https://github.com/Exiv2/exiv2/pull/2337

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-674 CWE-400

Status published

Products (3)

exiv2/exiv2 0.28.0

exiv2/exiv2 0.28.1

pypi/exiv2 0.16.0 - 0.16.1PyPI

Published Feb 12, 2024

Tracked Since Feb 18, 2026