Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

Published Jul 28, 2019 · Updated Aug 5, 2024 · Assigned by mitre