CVE-2017-9953 (NVD)

2017-06-26

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

Products Exiv2, Enterprise_linux
Type Use After Free (CWE-416)
First patch - None (likely due to unavailable code)
Links https://bugzilla.redhat.com/show_bug.cgi?id=1465061