CVE-2021-29473
Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
CVE-2021-29473- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2021-16081
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
EUVD-2021-16081- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
NVD
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
CVE-2021-29473- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-29473
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
ALPINE-CVE-2021-29473- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
OSVAZL-7211
CVE-2021-29473 affecting package exiv2 for versions less than 0.27.5-1
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
AZL-7211- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
CVE-2021-29473- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2021-29473
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
DEBIAN-CVE-2021-29473- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2021-1183
exiv2 security update
Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats.
Security Fix(es):
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.(CVE-2021-3482)
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4.(CVE-2021-29457)
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4.(CVE-2021-29458)
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4.(CVE-2021-29470)
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.(CVE-2021-29473)
Exiv2 is a command-line utility and C++ library for reading, writing,…
- Record
OESA-2021-1183- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:4173
Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
- Record
RHSA-2021:4173- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2021:4173
Moderate: exiv2 security, bug fix, and enhancement update
Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.
The following packages have been upgraded to a later upstream version: exiv2 (0.27.4). (BZ#1989860)
Security Fix(es):
-
exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482)
-
exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457)
-
exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458)
-
exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473)
-
exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS (CVE-2021-31292)
-
exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463)
-
exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623)
-
exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.
- Record
RLSA-2021:4173- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-29473
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.
- Record
UBUNTU-CVE-2021-29473- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVALSA-2021:4173 No score
Moderate: exiv2 security, bug fix, and enhancement update
Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.
The following packages have been upgraded to a later upstream version: exiv2 (0.27.4). (BZ#1989860)
Security Fix(es):
-
exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482)
-
exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457)
-
exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458)
-
exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473)
-
exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS (CVE-2021-31292)
-
exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463)
-
exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623)
-
exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)
-
exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2021:4173- Updated
- 2026-11-02
OSVMGASA-2021-0240 No score
Updated exiv2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities:
Heap-based buffer overflow in Jp2Image::readMetadata(). (CVE-2021-3482)
Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata. (CVE-2021-29457)
Out-of-bounds read in Exiv2::Internal::CrwMap::encode. (CVE-2021-29458)
Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-29463)
Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-29464)
Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header. (CVE-2021-29470)
Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata. (CVE-2021-29473)
Read of uninitialized memory may lead to information leak. (CVE-2021-29623)
DoS due to quadratic complexity in ProcessUTF8Portion. (CVE-2021-32617)
- Record
MGASA-2021-0240- Updated
- 2026-11-02
OSVSUSE-SU-2022:4208-1 No score
Security update for exiv2-0_26
This update for exiv2-0_26 fixes the following issues:
- CVE-2019-17402: Fixed improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
- CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
- CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
- CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
- CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
- CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
- Record
SUSE-SU-2022:4208-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:4252-1 No score
Security update for exiv2
This update for exiv2 fixes the following issues:
- CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of service. (bsc#1142681)
- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read(). (bsc#1189332)
- CVE-2021-34334: Fixed a DoS due to integer overflow in loop counter. (bsc#1189338)
- CVE-2021-31291: Fixed a heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service via crafted metadata (bsc#1188733).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2021-29457: Fixed a heap buffer overflow when write metadata into a crafted image file (bsc#1185002).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- Record
SUSE-SU-2022:4252-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:4276-1 No score
Security update for exiv2
This update for exiv2 fixes the following issues:
- CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
- CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
- CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
- CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
- CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
- CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
- CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).
- Record
SUSE-SU-2022:4276-1- Updated
- 2026-11-02
OSVUSN-4964-1 No score
exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29463)
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29464)
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-29473, CVE-2021-32617)
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29623)
- Record
USN-4964-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exiv2Alpine:v3.13 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.14 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.15 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.16 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.17 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.18 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.19 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.20 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.21 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.22 |
before 0.27.3-r2 | 0.27.3-r2 |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
exiv2Alpine:v3.23 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2Alpine:v3.24 |
before 0.27.3-r2 | 0.27.3-r2 |
exiv2AlmaLinux:8 From an advisory covering 12 CVEs |
before 0.27.4-5.el8 | 0.27.4-5.el8 |
exiv2-develAlmaLinux:8 From an advisory covering 12 CVEs |
before 0.27.4-5.el8 | 0.27.4-5.el8 |
exiv2-docAlmaLinux:8 From an advisory covering 12 CVEs |
before 0.27.4-5.el8 | 0.27.4-5.el8 |
exiv2-libsAlmaLinux:8 From an advisory covering 12 CVEs |
before 0.27.4-5.el8 | 0.27.4-5.el8 |
exiv2Azure Linux:2 |
before 0.27.5-1 | 0.27.5-1 |
exiv2Debian:12 |
before 0.27.5-1 | 0.27.5-1 |
exiv2Debian:13 |
before 0.27.5-1 | 0.27.5-1 |
exiv2Debian:14 |
before 0.27.5-1 | 0.27.5-1 |
exiv2Debian:9 From an advisory covering 5 CVEs |
before 0.25-3.1+deb9u3, plus listed versions 0.25-3.10.25-3.1+0.riscv64.10.25-3.1+deb9u10.25-3.1+deb9u2 |
0.25-3.1+deb9u3 |
exiv2Debian:10 From an advisory covering 5 CVEs |
before 0.25-4+deb10u2, plus listed versions 0.25-40.25-4+deb10u1 |
0.25-4+deb10u2 |
exiv2Mageia:7 From an advisory covering 9 CVEs |
before 0.27.1-3.5.mga7 | 0.27.1-3.5.mga7 |
exiv2Mageia:8 From an advisory covering 9 CVEs |
before 0.27.3-1.1.mga8 | 0.27.3-1.1.mga8 |
exiv2openEuler:20.03-LTS-SP1 From an advisory covering 7 CVEs |
before 0.26-25.oe1 | 0.26-25.oe1 |
exiv2Red Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-libsRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-libs-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-develRed Hat:enterprise_linux:8::crb From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-docRed Hat:enterprise_linux:8::crb From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-libs-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2Rocky Linux:8 From an advisory covering 12 CVEs |
before 0:0.27.4-5.el8 | 0:0.27.4-5.el8 |
exiv2-0_26SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 11 CVEs |
before 0.26-150400.9.21.1 | 0.26-150400.9.21.1 |
exiv2-0_26openSUSE:Leap 15.4 From an advisory covering 11 CVEs |
before 0.26-150400.9.21.1 | 0.26-150400.9.21.1 |
exiv2SUSE:OpenStack Cloud 9 From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 8 CVEs |
before 0.23-12.18.1 | 0.23-12.18.1 |
exiv2SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server 15-LTSS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Manager Proxy 4.1 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Manager Retail Branch Server 4.1 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Manager Server 4.1 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Enterprise Storage 6 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2SUSE:Enterprise Storage 7 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2openSUSE:Leap 15.3 From an advisory covering 11 CVEs |
before 0.26-150000.6.26.1 | 0.26-150000.6.26.1 |
exiv2Ubuntu:Pro:16.04:LTS |
before 0.25-2.1ubuntu16.04.7+esm2, plus listed versions 0.25-1ubuntu10.25-2.10.25-2.1ubuntu16.04.10.25-2.1ubuntu16.04.20.25-2.1ubuntu16.04.3 Show 4 moreShow less0.25-2.1ubuntu16.04.40.25-2.1ubuntu16.04.50.25-2.1ubuntu16.04.60.25-2.1ubuntu16.04.7+esm1 |
0.25-2.1ubuntu16.04.7+esm2 |
exiv2Ubuntu:18.04:LTS |
before 0.25-3.1ubuntu0.18.04.9, plus listed versions 0.25-3.10.25-3.1ubuntu0.18.04.10.25-3.1ubuntu0.18.04.20.25-3.1ubuntu0.18.04.30.25-3.1ubuntu0.18.04.40.25-3.1ubuntu0.18.04.50.25-3.1ubuntu0.18.04.7 |
0.25-3.1ubuntu0.18.04.9 |
exiv2Ubuntu:20.04:LTS |
before 0.27.2-8ubuntu2.4, plus listed versions 0.25-4ubuntu20.25-4ubuntu30.27.2-8ubuntu20.27.2-8ubuntu2.2 |
0.27.2-8ubuntu2.4 |
exiv2Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs |
before 0.25-2.1ubuntu16.04.7+esm2, plus listed versions 0.25-1ubuntu10.25-2.10.25-2.1ubuntu16.04.10.25-2.1ubuntu16.04.20.25-2.1ubuntu16.04.3 Show 4 moreShow less0.25-2.1ubuntu16.04.40.25-2.1ubuntu16.04.50.25-2.1ubuntu16.04.60.25-2.1ubuntu16.04.7+esm1 |
0.25-2.1ubuntu16.04.7+esm2 |
exiv2Ubuntu:18.04:LTS From an advisory covering 5 CVEs |
before 0.25-3.1ubuntu0.18.04.9, plus listed versions 0.25-3.10.25-3.1ubuntu0.18.04.10.25-3.1ubuntu0.18.04.20.25-3.1ubuntu0.18.04.30.25-3.1ubuntu0.18.04.40.25-3.1ubuntu0.18.04.50.25-3.1ubuntu0.18.04.7 |
0.25-3.1ubuntu0.18.04.9 |
exiv2Ubuntu:20.04:LTS From an advisory covering 5 CVEs |
before 0.27.2-8ubuntu2.4, plus listed versions 0.25-4ubuntu20.25-4ubuntu30.27.2-8ubuntu20.27.2-8ubuntu2.2 |
0.27.2-8ubuntu2.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-29473 is a low vulnerability (CVSS 2.5) in Exiv2, published April 26, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. Fixed in exiv2 0.27.3-r2.
References
github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ
Show 127 moreShow less
debian.org/security/2021/dsa-4958
lists.debian.org/debian-lts-announce/2021/08/msg00028.html
security.gentoo.org/glsa/202312-06
security.alpinelinux.org/vuln/CVE-2021-29473
vulners.com/cve/CVE-2021-29457
nvd.nist.gov/vuln/detail/CVE-2021-29473
security-tracker.debian.org/tracker/CVE-2021-29473
advisories.mageia.org/MGASA-2021-0240.html
bugs.mageia.org/show_bug.cgi?id=29008
ubuntu.com/security/notices/USN-4941-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1183
access.redhat.com/errata/RHSA-2021:4173
bugzilla.redhat.com/show_bug.cgi?id=1946314
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4173.json
cve.org/CVERecord?id=CVE-2021-3482
errata.rockylinux.org/RLSA-2021:4173
suse.com/support/update/announcement/2022/suse-su-20224208-1
bugzilla.suse.com/1050257
Left out here: the rest of 1 source description. The JSON record has them.