Denial of Service Vulnerability in Exiv2 through 0.27.1 via Invalid Data Location in CRW Image File

Denial of Service Vulnerability in Exiv2 through 0.27.1 via Invalid Data Location in CRW Image File

CVE-2019-13113 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file.

Learn more about our Web Application Penetration Testing UK.