SXF Common Library Improper Input Handling Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the SXF Common Library, all versions, provided by the General Incorporated Association OCF. The issue arises from improper handling of input data, which can cause products using the library to crash when a crafted file is read.

Impact

Exploitation of this vulnerability can lead to a crash of the application or product using the SXF Common Library.

Remediation

Users are advised not to read untrusted SXF files. For developers, the SXF Common Library Ver.3.xx can be requested from the OCF by submitting a application form via email.