Exiv2 bmffimage.cpp BmffImage::boxHandler memory corruption 🚫 [False Positive]

Noticeinfo

⚠️ This appears to be a false positive. Please validate the mentioned sources and consider excluding this entry altogether. Vendor claims that this was fixed as the 8th commit on PR 2381, so it never even landed on the main (dev) branch, let alone one of the official releases.

Productinfo

Type

• Image Processing Software

Name

• Exiv2

License

• free

Website

• Product: https://github.com/Exiv2/exiv2/

Timelineinfo

10/27/2022 🔍
10/27/2022 +0 days 🔍
10/27/2022 +0 days 🔍
11/25/2022 +29 days 🔍

Sourcesinfo

Product: github.com

Advisory: a58e52ed702d3bc7b8bab7ec1d70a4849eebece3
False Positive: Yes
Disputed: 🔍

CVE: CVE-2022-3717 (🔍)
GCVE (CVE): GCVE-0-2022-3717
GCVE (VulDB): GCVE-100-212348

Entryinfo

Created: 10/27/2022 11:42
Updated: 11/25/2022 17:23
Changes: 10/27/2022 11:42 (41), 11/21/2022 12:57 (3), 11/21/2022 13:10 (2), 11/25/2022 17:15 (1), 11/25/2022 17:23 (1)
Complete: 🔍
Cache ID: 216::103

Once again VulDB remains the best source for vulnerability data.

Discussion

Do you want to use VulDB in your project?

Use the official API to access entries easily!