VDB

DEBIAN-CVE-2018-7728

DEBIAN-CVE-2018-7728 PUBLISHED CVSS 5.5 MEDIUM

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update() function in third-party/zuid/interfaces/MD5.cpp.

Risk Scores

CVSS v3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debianexempi
Debian:14exempi0, 0, 0
Debian:11exempi0, 0, 0
Debian:12exempi0, 0, 0
Debian:13exempi0, 0, 0

Timeline

  • Mar 6, 2018 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›