PoC Index85,101 CVEs with PoCs

CVE-2020-18899

MEDIUM 6.5EPSS 1.7%

An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.

CVSS v3.1 NVD
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v2.0 NVD
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
1.66% chance of exploitation in the next 30 days, 76th percentile
Published
2021-08-19
Updated
2024-10-15

Proof-of-concept exploits (1)

References