CVE-2014-9449: EXIV2

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

Affected products

• EXIV2 EXIV2: version 0.24 only
• Fedoraproject Fedora: version 21 only

Published 2015-01-02. Last modified 2026-06-17.