Exiv2 up to 0.28.1 QuickTime Video NikonTagsDecoder out-of-bounds

Summaryinfo

A vulnerability was found in Exiv2 up to 0.28.1. It has been declared as problematic. This impacts the function QuickTimeVideo::NikonTagsDecoder of the component QuickTime Video Handler. Executing a manipulation can lead to out-of-bounds. The identification of this vulnerability is CVE-2024-24826. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in Exiv2 up to 0.28.1 (Image Processing Software). This vulnerability affects the function QuickTimeVideo::NikonTagsDecoder of the component QuickTime Video Handler. The manipulation with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect availability. CVE summarizes:

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, `QuickTimeVideo::NikonTagsDecoder`, was new in v0.28.0, so Exiv2 versions before v0.28 are _not_ affected. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. In most cases this out of bounds read will result in a crash. This bug is fixed in version v0.28.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The weakness was shared 02/13/2024 as GHSA-g9xm-7538-mq8w. The advisory is shared for download at github.com. This vulnerability was named CVE-2024-24826 since 01/31/2024. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 213670 (Amazon Linux 2 : exiv2 (ALAS-2025-2728)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 0.28.2 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at Tenable (213670). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Image Processing Software

Name

• Exiv2

Version

• 0.28.0
• 0.28.1

License

• free

Website

• Product: https://github.com/Exiv2/exiv2/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion