PoC Index85,100 CVEs with PoCs

CVE-2018-9145

MEDIUM 6.5EPSS 1.8%

In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the 4-DataBuf-abort-1 PoC file.

CVSS v3.0 NVD
6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v2.0 NVD
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
1.82% chance of exploitation in the next 30 days, 78th percentile
Published
2018-03-30
Updated
2024-08-05

Proof-of-concept exploits (1)

Security advisories

References

Related