Exiv2 QuickTime Video quicktimevideo.cpp userDataDecoder integer overflow 🚫 [False Positive]

Noticeinfo

⚠️ This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all. Issue was introduced on the main (dev) branch and fixed shortly afterwards, so none of the official releases were ever affected.

Productinfo

Type

• Image Processing Software

Name

• Exiv2

License

• free

Website

• Product: https://github.com/Exiv2/exiv2/

Timelineinfo

10/29/2022 🔍
10/29/2022 +0 days 🔍
10/29/2022 +0 days 🔍
11/26/2022 +28 days 🔍

Sourcesinfo

Product: github.com

Advisory: bf4f28b727bdedbd7c88179c30d360e54568a62e
False Positive: Yes
Disputed: 🔍

CVE: CVE-2022-3756 (🔍)
GCVE (CVE): GCVE-0-2022-3756
GCVE (VulDB): GCVE-100-212496

Entryinfo

Created: 10/29/2022 17:21
Updated: 11/26/2022 14:13
Changes: 10/29/2022 17:21 (42), 11/21/2022 13:11 (4), 11/26/2022 14:12 (1), 11/26/2022 14:13 (1)
Complete: 🔍
Cache ID: 216::103

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion

Do you want to use VulDB in your project?

Use the official API to access entries easily!