Exiv2 QuickTime Video quicktimevideo.cpp multipleEntriesDecoder infinite loop 🚫 [False Positive]

Noticeinfo

⚠️ This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all. Issue was introduced on the main (dev) branch and fixed shortly afterwards, so none of the official releases were ever affected.

Productinfo

Type

• Image Processing Software

Name

• Exiv2

License

• free

Website

• Product: https://github.com/Exiv2/exiv2/

Timelineinfo

11/11/2022 🔍
11/11/2022 +0 days 🔍
11/11/2022 +0 days 🔍
12/17/2022 +36 days 🔍

Sourcesinfo

Product: github.com

Advisory: 2394
False Positive: Yes
Disputed: 🔍

CVE: CVE-2022-3953 (🔍)
GCVE (CVE): GCVE-0-2022-3953
GCVE (VulDB): GCVE-100-213459

Entryinfo

Created: 11/11/2022 14:54
Updated: 12/17/2022 09:06
Changes: 11/11/2022 14:54 (42), 11/21/2022 13:11 (4), 12/17/2022 09:04 (1), 12/17/2022 09:06 (1)
Complete: 🔍
Cache ID: 216::103

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion

Want to stay up to date on a daily basis?

Enable the mail alert feature now!