| Package | Affected versions | Patched versions |
|---|---|---|
| exiv2 | = 0.26 |
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free