Exiv2 bmffimage.cpp BmffImage::boxHandler memory corruption 🚫 [False Positive]

Noticeinfo

⚠️ A vulnerability was suspected in Exiv2. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all. Vendor claims that this was fixed as the 8th commit on PR 2381, so it never even landed on the main (dev) branch, let alone one of the official releases.

Productinfo

Type

Name

License

Timelineinfo

10/27/2022 🔍
10/27/2022 +0 days 🔍
10/27/2022 +0 days 🔍
11/25/2022 +29 days 🔍

Sourcesinfo

Advisory: a58e52ed702d3bc7b8bab7ec1d70a4849eebece3
False Positive: Yes
Disputed: 🔍

CVE: CVE-2022-3717 (🔍)
See also: 🔍

Entryinfo

Created: 10/27/2022 11:42
Updated: 11/25/2022 17:23
Changes: 10/27/2022 11:42 (41), 11/21/2022 12:57 (3), 11/21/2022 13:10 (2), 11/25/2022 17:15 (1), 11/25/2022 17:23 (1)
Complete: 🔍
Cache ID: 3:566:103

Discussion

No comments yet. Languages: en.

Please log in to comment.

Do you want to use VulDB in your project?

Use the official API to access entries easily!