CVE-2017-1000126

CVE-2017-1000126 describes a stack out-of-bounds read vulnerability within the WebP parser of Exiv2 version 0.26. This flaw could allow an attacker to cause a denial of service. Rated with a CVSS score of 5.5 (Medium), this vulnerability requires local access and user interaction (e.g., opening a malicious file) to exploit, leading to a high impact on availability. There is no impact on confidentiality or integrity. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.