CVE-2021-3482
Summary
| CVE | CVE-2021-3482 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-04-08 23:15:00 UTC |
|---|
| Updated | 2023-11-07 03:38:00 UTC |
|---|
| Description | A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 33 Update: exiv2-0.27.3-6.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: exiv2-0.27.3-6.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 33 Update: exiv2-0.27.3-6.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| 1946314 – (CVE-2021-3482) CVE-2021-3482 exiv2: heap-based buffer overflow in Jp2Image::readMetadata() in jp2image.cpp |
MISC |
bugzilla.redhat.com |
|
| Debian -- Security Information -- DSA-4958-1 exiv2 |
DEBIAN |
www.debian.org |
|
| [SECURITY] Fedora 34 Update: exiv2-0.27.3-6.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] [DLA 2750-1] exiv2 security update |
MLIST |
lists.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178761 Debian Security Update for exiv2 (DSA 4958-1)
- 178777 Debian Security Update for exiv2 (DLA 2750-1)
- 181944 Debian Security Update for exiv2 (CVE-2021-3482)
- 198360 Ubuntu Security Notification for Exiv2 vulnerabilities (USN-4941-1)
- 239787 Red Hat Update for exiv2 security (RHSA-2021:4173)
- 281237 Fedora Security Update for exiv2 (FEDORA-2021-be94728b95)
- 281238 Fedora Security Update for exiv2 (FEDORA-2021-10d7331a31)
- 501545 Alpine Linux Security Update for exiv2
- 501840 Alpine Linux Security Update for exiv2
- 503076 Alpine Linux Security Update for exiv2
- 503344 Alpine Linux Security Update for exiv2
- 503418 Alpine Linux Security Update for exiv2
- 503507 Alpine Linux Security Update for exiv2
- 503534 Alpine Linux Security Update for exiv2
- 503582 Alpine Linux Security Update for exiv2
- 503619 Alpine Linux Security Update for exiv2
- 503646 Alpine Linux Security Update for exiv2
- 503665 Alpine Linux Security Update for exiv2
- 506047 Alpine Linux Security Update for exiv2
- 670535 EulerOS Security Update for exiv2 (EulerOS-SA-2021-2293)
- 670569 EulerOS Security Update for exiv2 (EulerOS-SA-2021-2327)
- 690094 Free Berkeley Software Distribution (FreeBSD) Security Update for exiv2 (d49f86ab-d9c7-11eb-a200-00155d01f201)
- 901229 Common Base Linux Mariner (CBL-Mariner) Security Update for exiv2 (7217)
- 902265 Common Base Linux Mariner (CBL-Mariner) Security Update for exiv2 (7217-1)
- 940296 AlmaLinux Security Update for exiv2 (ALSA-2021:4173)
- 960736 Rocky Linux Security Update for exiv2 (RLSA-2021:4173)
