CVE-2023-44398

Advisory

Exiv2 (Python bindings to exiv2 C++ library) 0.15.0 and 0.14.1 ship with libexiv2 version 0.28.0, which is affected by CVE-2023-44398: An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, 'BmffImage::brotliUncompress', is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file.
https://github.com/jim-easterbrook/python-exiv2/commit/61c1365e4fcd09aaf391ad1d8435d9fab0715db7
https://github.com/Exiv2/exiv2/security/advisories/GHSA-hrw9-ggg3-3r4r

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/Exiv2/exiv2/security/advisories/GHSA-hrw9-ggg3-3r4r
• https://github.com/Exiv2/exiv2/commit/e884a0955359107f4031c74a07406df7e99929a5
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44398