Exiv2 QuickTime Video quicktimevideo.cpp decodeBlock buffer overflow 🚫 [False Positive]

Noticeinfo

⚠️ Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all. Issue was introduced on the main (dev) branch and fixed shortly afterwards, so none of the official releases were ever affected.

Productinfo

Type

• Image Processing Software

Name

• Exiv2

License

• free

Website

• Product: https://github.com/Exiv2/exiv2/

Timelineinfo

10/29/2022 🔍
10/29/2022 +0 days 🔍
10/29/2022 +0 days 🔍
11/26/2022 +28 days 🔍

Sourcesinfo

Product: github.com

Advisory: d3651fdbd352cbaf259f89abf7557da343339378
False Positive: Yes
Disputed: 🔍

CVE: CVE-2022-3757 (🔍)
GCVE (CVE): GCVE-0-2022-3757
GCVE (VulDB): GCVE-100-212497

Entryinfo

Created: 10/29/2022 17:23
Updated: 11/26/2022 14:18
Changes: 10/29/2022 17:23 (41), 11/21/2022 13:11 (4), 11/26/2022 14:15 (2), 11/26/2022 14:18 (1)
Complete: 🔍
Cache ID: 216::103

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion

Do you want to use VulDB in your project?

Use the official API to access entries easily!