Executive brief
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
Affected products
- PyPI exiv2
Junglewise Threat Intelligence
CVE-2021-31292: PYSEC-2021-877 - An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of s
CVE-2021-31292 · Severity: low · CVSS 3.1 · Published 2021-07-26
Technologies: exiv2 (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1355 - Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
- PYSEC-2026-1354 - Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
- PYSEC-2026-1353 - Exiv2 allows Use After Free
- PYSEC-2024-107 - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-servi
- PYSEC-2024-106 - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds