vulnerability

Red Hat: CVE-2018-19108: CVE-2018-19108 exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Nov 8, 2018
Added
Aug 7, 2019
Modified
Jul 9, 2025

Description

In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.

Solution(s)

no-fix-redhat-rpm-packageredhat-upgrade-exiv2redhat-upgrade-exiv2-debuginforedhat-upgrade-exiv2-debugsourceredhat-upgrade-exiv2-develredhat-upgrade-exiv2-docredhat-upgrade-exiv2-libsredhat-upgrade-exiv2-libs-debuginforedhat-upgrade-geglredhat-upgrade-gegl-debuginforedhat-upgrade-gegl-debugsourceredhat-upgrade-gnome-color-managerredhat-upgrade-gnome-color-manager-debuginforedhat-upgrade-gnome-color-manager-debugsourceredhat-upgrade-libgexiv2redhat-upgrade-libgexiv2-debuginforedhat-upgrade-libgexiv2-debugsourceredhat-upgrade-libgexiv2-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.