Unscored USN-4270-1 1 CVE

exiv2 vulnerability

Published Feb 5, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exiv2 incorrectly handled certain images.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	exiv2	0.25-2.1ubuntu16.04.6
Ubuntu · 18.04 LTS 18.04:LTS	exiv2	0.25-3.1ubuntu0.18.04.5

Vulnerabilities 1

Unscored —

CVE-2019-20421

In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, wit…

exiv2 exiv2 exiv2 exiv2 Debian Ubuntu Azure Linux Alpine

Jan 27, 2020

References

report
https://ubuntu.com/security/CVE-2019-20421