CVE-2020-18771 – Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1M

5 years ago

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18771

Reference (s):

https://github.com/Exiv2/exiv2/issues/756