CVE-2019-9144: EXIV2

High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days.

An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected products

• EXIV2 EXIV2: version 0.27 only

Published 2019-02-25. Last modified 2026-06-17.