CVE-2023-44398

An out-of-bounds write vulnerability has been identified in the Exiv2 library within the BmffImage::brotliUncompress() function. This issue arises when Exiv2 is employed to extract metadata from a manipulated image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file.

This vulnerability does not affect any Red Hat Products, as the affected component only exists in exiv2 version 0.28.0, which is not shipped.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.