description: A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.
problem types: CWE-20->CWE-119
affected:
{
product: exiv2
vendor: n/a
versions:
status: affected, version: exiv2 0.27.4RC2
}