https://bugs.kde.org/show_bug.cgi?id=441121

--- Comment #4 from Jan Rathmann <jan.rathm...@gmx.de> ---
I have tracked this down to the following change in CVE-2021-37620-3.patch
(Ubuntu src package exiv2-0.27.3-3ubuntu1.5):

===================================================================
--- exiv2-0.27.3.orig/src/tags_int.cpp
+++ exiv2-0.27.3/src/tags_int.cpp
@@ -2865,7 +2865,7 @@ namespace Exiv2 {
         }

         std::string stringValue = value.toString();
-        if (stringValue[19] == 'Z') {
+        if (stringValue.at(19) == 'Z') {
             stringValue = stringValue.substr(0, 19);
         }
         for (size_t i = 0; i < stringValue.length(); ++i) {

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to