There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-7203.json"