Launchpad.net

CVE 2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser

See the CVE page on Mitre.org for more details.