CVE-2020-19715
exiv2: integer buffer overflow in getUShort fucntion leads to DoS
Severity
UnknownRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 13, 2021
Updated · July 3, 2026
Description
[REJECTED CVE] An integer overflow vulnerability in the getUShort function of Exiv2, results in segmentation faults within the application, leading to a denial of service (DOS).
Statement
This flaw was found to be a duplicate of CVE-2019-13110. Please see https://access.redhat.com/security/cve/CVE-2019-13110 for information about affected products and security errata.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 0CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N
CWE-400 · Uncontrolled Resource Consumption