| Description |
| - |
FIX: A malicious file could be crafted to cause extremely large values in some tags without tripping any buffer range checks. This is bad with the libexif representation of Canon MakerNotes because some arrays are turned into individual tags that the application must loop around. |
| + |
An issue has been found in libexif before 0.6.22 where a malicious file could be crafted to cause extremely large values in some tags without any buffer range checks which results in a time consumption denial of service when parsing canon array markers. |
|