MEDIUM6.5
PYSEC-2021-879
Details
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/exiv2
Introduced in:
0No fixed version published yet for exiv2 (pip). Pin to a known-safe version or switch to an alternative.