CVE-2019-13110 — exiv2: integer-overflow and out-of-bounds read in CiffDirectory::readDirectory leads to denail of service

Back Back to CVE browser

MEDIUM

exiv2: integer-overflow and out-of-bounds read in CiffDirectory::readDirectory leads to denail of service

Published Jun 30, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.93%

Description

A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file.

Affected products

Red Hat Enterprise Linux 6

exiv2

Out of support scope
Red Hat Enterprise Linux 7

exiv2

Fix deferred
Red Hat Enterprise Linux 8

exiv2

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	exiv2	Out of support scope	n/a
Red Hat Enterprise Linux 7	exiv2	Fix deferred	n/a
Red Hat Enterprise Linux 8	exiv2	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 8 as they did not include the vulnerable code.

Metrics

1.93% 0.01925

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.01925

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Table of values (17 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	1.93% (0.01925)	79.24th	v5 (v2026.06.15)
Jun 15, 2026	1.93% (0.01925)	77.22th	v5 (v2026.06.15)
Jan 13, 2026	1.32% (0.01323)	79.44th	v4 (v2025.03.14)
Mar 17, 2025	0.11% (0.00113)	27.54th	v4 (v2025.03.14)
Jul 20, 2024	0.51% (0.00506)	76.70th	v3 (v2023.03.01)
Feb 8, 2024	0.51% (0.00506)	75.81th	v3 (v2023.03.01)
Nov 8, 2023	0.51% (0.00506)	73.75th	v3 (v2023.03.01)
Oct 24, 2023	0.21% (0.00210)	58.71th	v3 (v2023.03.01)
Sep 3, 2023	0.15% (0.00148)	50.14th	v3 (v2023.03.01)
Mar 7, 2023	0.12% (0.00121)	44.63th	v3 (v2023.03.01)
Mar 6, 2023	1.02% (0.01018)	40.69th	v2 (v2022.01.01)
Apr 1, 2022	1.02% (0.01018)	36.86th	v2 (v2022.01.01)
Feb 4, 2022	4.13% (0.04134)	68.25th	v2 (v2022.01.01)
Feb 3, 2022	5.55% (0.05553)	80.10th	v1
Jan 6, 2022	5.55% (0.05553)	79.90th	v1
Jan 5, 2022	1.29% (0.01294)	70.12th	v5 (v2026.06.15)
Apr 14, 2021	1.29% (0.01294)	0.00th	v1

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-190

Integer Overflow

References (9)

https://access.redhat.com/security/cve/CVE-2019-13110
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1728486
Issue Tracking
https://github.com/Exiv2/exiv2/issues/843
ExploitThird Party Advisory
https://github.com/Exiv2/exiv2/pull/844
PatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
mailing-listMailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/
vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-13110
https://usn.ubuntu.com/4056-1/
vendor-advisoryThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2019-13110

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-13110		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1728486		Issue Tracking
https://github.com/Exiv2/exiv2/issues/843		ExploitThird Party Advisory
https://github.com/Exiv2/exiv2/pull/844		PatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html		mailing-listMailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/		vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-13110
https://usn.ubuntu.com/4056-1/		vendor-advisoryThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2019-13110