CVE-2024-39695 : Exiv2 is a command-line utility and C++ library for reading, writing, deleting,

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.

Published 2024-07-08 15:14:28

Updated 2024-07-09 14:47:20

Source GitHub, Inc.

View at NVD, CVE.org

Products affected by CVE-2024-39695

Exiv2 » Exiv2
Versions from including (>=) 0.28.0 and before (<) 0.28.3
cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2024-39695

EPSS FAQ

0.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 59 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-39695

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	N/A	N/A	GitHub, Inc.	2024-07-08
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L	3.9	2.5	NIST	2024-07-09
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: Low
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	GitHub, Inc.	2024-07-08
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2024-39695

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.
Assigned by:
- a0819718-46f1-4df5-94e2-005712e83aaa (Primary)
- nvd@nist.gov (Primary)
- security-advisories@github.com (Secondary)

References for CVE-2024-39695

https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh

Out-of-bounds read in AsfVideo::streamProperties · Advisory · Exiv2/exiv2 · GitHub
Vendor Advisory
https://github.com/Exiv2/exiv2/pull/3006

Use readOrThrow() to detect premature EOF (backport #3005) by mergify[bot] · Pull Request #3006 · Exiv2/exiv2 · GitHub
Issue Tracking;Patch
https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387

Credit to OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detai… · Exiv2/exiv2@3a28346 · GitHub
Patch

Jump to

Vulnerability Details : CVE-2024-39695

Products affected by CVE-2024-39695

Exploit prediction scoring system (EPSS) score for CVE-2024-39695

CVSS scores for CVE-2024-39695

CWE ids for CVE-2024-39695

References for CVE-2024-39695