CVE-2020-18651

Vulnerability

A buffer overflow vulnerability exists in the ID3_Support::ID3v2Frame::getFrameValue function of Exempi, a library for parsing XMP metadata. The flaw affects Exempi version 2.5.0 and earlier [1]. It is triggered when the library processes a specially crafted audio file containing an ID3v2 frame with excessive data, which overruns the internal buffer [2].

Exploitation

An attacker can exploit this vulnerability by delivering a malicious audio file with a crafted ID3v2 frame to a user or application that utilizes Exempi to parse media metadata. Successful exploitation requires no authentication beyond the ability to cause the file to be opened and processed by the vulnerable library. The attacker does not need any special network position if the file is opened via local access or through an application that downloads and processes media [1].

Impact

Successful exploitation leads to a buffer overflow, resulting in memory corruption and a crash of the application using Exempi. This constitutes a denial of service (DoS) condition. The vulnerability does not appear to provide code execution or information disclosure based on the available references [1][2].

Mitigation

The vendor fixed this issue in a commit referenced as fdd4765a699f9700850098b43b9798b933acb32f [2]. Users should update Exempi to a version that includes this fix. No CVE in KEV has been reported as of the publication date. No alternative workaround is detailed in the available sources.