CVE-2021-34334

A flaw was found in Exiv2, a utility and library for image metadata. An attacker can exploit this vulnerability by tricking a victim into processing a specially crafted image file. This can lead to an infinite loop, causing a denial of service (DoS) in the application.

This vulnerability exists in Exiv2 where an infinite loop can be triggered when reading metadata from a specially crafted image file, this results in a Low Severity Denial of Service (DoS), as it requires a user to manually interact with a malicious file. While the exploit causes the individual Exiv2 process to hang and consume CPU resources, it does not compromise data confidentiality or integrity, and the impact is contained within the local execution environment.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.