CVE-2017-14859

MEDIUM · CVSS 5.5 EPSS 1.07%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-09-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-14859

Severity

MEDIUM

CVSS

5.5

EPSS

1.07%

Original Filing — NVD Description

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.