title: Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
description: exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata exiv2: Use of uninitialized memory in isWebPType() may lead to information leak exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS exiv2: DoS due to quadratic complexity in ProcessUTF8Portion exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
cpes: cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb