CVE-2018-14338 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.