CVE-2018-9305
HIGH 8.1EPSS 1.9%
In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.
- CVSS v3.0 NVD
- 8.1 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - CVSS v2.0 NVD
- 5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:P - EPSS
- 1.92% chance of exploitation in the next 30 days, 80th percentile
- Published
- 2018-04-04
- Updated
- 2024-08-05
Proof-of-concept exploits (2)
- Exiv2/exiv2/issues/2631167★ · 2026-10-16
- xiaoqx/pocs/blob/master/exiv2/readme.md20★ · 2018-07-25