CVE-2020-19715

Related Vulnerabilities: CVE-2020-19715  

An integer overflow vulnerability in the getUShort function of Exiv2 0.27.1 results in segmentation faults within the application, leading to a denial of service (DOS).

Description

The MITRE CVE dictionary describes this issue as:

An integer overflow vulnerability in the getUShort function of Exiv2 0.27.1 results in segmentation faults within the application, leading to a denial of service (DOS).

Additional Information

  • Bugzilla 1988977: CVE-2020-19715 exiv2: integer buffer overflow in getUShort fucntion leads to DoS
  • CWE-400: Uncontrolled Resource Consumption
  • FAQ: Frequently asked questions about CVE-2020-19715