← Database

CVE-2021-3482

MEDIUM CVSS: 6.5 Published: 2021-04-08 Modified: 2026-06-17

Description

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.

Affected Platforms

Debian Debian LinuxRedhat Enterprise LinuxFedoraproject FedoraExiv2 Exiv2

Weakness Type

CWE-20, CWE-787

References