title: Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
description: exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check
cpes: cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb