Exiv2 vulnerabilities

Products

• Exiv2 124

Newest

• exiv2 Exiv2: Out-of-bounds read in CrwMap::decode0x0805 CVE-2026-25884 Fix available 2.7 LowMarch 2, 2026
• exiv2 Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow CVE-2026-27596 Fix available 2.7 LowMarch 2, 2026
• exiv2 Exiv2: Uncaught exception - cannot create std::vector larger than max_size() CVE-2026-27631 Fix available 2.7 LowMarch 2, 2026
• exiv2 Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata CVE-2025-55304 Fix available 1.8 LowAugust 29, 2025
• exiv2 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file CVE-2025-54080 Fix available 1.8 LowAugust 29, 2025
• exiv2 Use After Free in Exiv2 CVE-2025-26623 Fix available 5.3 MediumFebruary 18, 2025
• exiv2 Exiv2 has an out-of-bounds read in AsfVideo::streamProperties CVE-2024-39695 Fix available 5.3 MediumJuly 8, 2024
• exiv2 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2 CVE-2024-24826 Fix available 5.5 MediumFebruary 12, 2024
• exiv2 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2 CVE-2024-25112 Fix available 5.5 MediumFebruary 12, 2024
• exiv2 Out-of-bounds write in exiv2 CVE-2023-44398 Fix available 8.8 HighNovember 6, 2023
• exiv2 Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows... CVE-2020-18831 Fix available 7.8 HighAugust 22, 2023
• exiv2 A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows... CVE-2020-18774 6.5 MediumAugust 23, 2021
• exiv2 An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers... CVE-2020-18773 6.5 MediumAugust 23, 2021
• exiv2, debian linux +1 more Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in... CVE-2020-18771 Fix available 8.1 HighAugust 23, 2021
• exiv2 A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers... CVE-2020-18898 Fix available 6.5 MediumAugust 19, 2021
• exiv2 An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0... CVE-2020-18899 Fix available 6.5 MediumAugust 19, 2021
• exiv2, fedoraproject fedora +1 more Denial of service due to infinite loop in JpegBase::printStructure (#2) CVE-2021-37623 Fix available 5.5 MediumAugust 9, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Denial of service due to infinite loop in JpegBase::printStructure (#1) CVE-2021-37622 Fix available 5.5 MediumAugust 9, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Denial of service due to infinite loop in Image::printIFDStructure CVE-2021-37621 Fix available 5.5 MediumAugust 9, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Out-of-bounds read in XmpTextValue::read() CVE-2021-37620 Fix available 4.7 MediumAugust 9, 2021
• exiv2, fedoraproject fedora +1 more Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header CVE-2021-37619 Fix available 4.7 MediumAugust 9, 2021
• exiv2, fedoraproject fedora +1 more Out-of-bounds read in Exiv2::Jp2Image::printStructure CVE-2021-37618 Fix available 4.7 MediumAugust 9, 2021
• exiv2, fedoraproject fedora +1 more Null pointer dereference in Exiv2::Internal::resolveLens0x8ff CVE-2021-37616 Fix available 5.5 MediumAugust 9, 2021
• exiv2, fedoraproject fedora +1 more Null pointer dereference in Exiv2::Internal::resolveLens0x319 CVE-2021-37615 Fix available 4.7 MediumAugust 9, 2021
• exiv2, fedoraproject fedora +1 more Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff CVE-2021-34335 Fix available 4.7 MediumAugust 9, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Denial of service due to integer overflow in loop counter CVE-2021-34334 Fix available 5.5 MediumAugust 9, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Denial of service due to assertion failure in crwimage_int.cpp CVE-2021-32815 Fix available 5.5 MediumAugust 9, 2021
• exiv2, debian linux, fedoraproject fedora +2 more An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap... CVE-2021-31292 Fix available 7.5 HighJuly 26, 2021
• exiv2, debian linux +1 more A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a... CVE-2020-19716 Fix available 6.5 MediumJuly 13, 2021
• exiv2, fedoraproject fedora +1 more Denial of service in Exiv2 CVE-2021-32617 Fix available 4.7 MediumMay 17, 2021
• exiv2, fedoraproject fedora +1 more Uninitialized variable bug in Exiv2 CVE-2021-29623 Fix available 3.6 LowMay 13, 2021
• exiv2, fedoraproject fedora +1 more Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header CVE-2021-29464 Fix available 3.3 LowApril 30, 2021
• exiv2, fedoraproject fedora +1 more Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata CVE-2021-29463 Fix available 3.3 LowApril 30, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata CVE-2021-29473 Fix available 2.5 LowApril 26, 2021
• exiv2, fedoraproject fedora +1 more Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header CVE-2021-29470 Fix available 4.7 MediumApril 23, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Out-of-bounds read in Exiv2::Internal::CrwMap::encode CVE-2021-29458 Fix available 5.5 MediumApril 19, 2021
• exiv2, debian linux, fedoraproject fedora +2 more Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata CVE-2021-29457 Fix available 7.8 HighApril 19, 2021
• exiv2, debian linux, fedoraproject fedora +1 more +3 more A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation... CVE-2021-3482 Fix available 6.5 MediumApril 8, 2021
• exiv2, canonical ubuntu linux, debian linux +2 more In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an... CVE-2019-20421 Fix available 7.5 HighJanuary 27, 2020
• exiv2, canonical ubuntu linux, debian linux +2 more Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from... CVE-2019-17402 Fix available 6.5 MediumOctober 9, 2019
• exiv2 In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage:... CVE-2019-14982 6.5 MediumAugust 12, 2019
• exiv2 Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage... CVE-2019-14368 7.8 HighJuly 28, 2019
• exiv2, debian linux +1 more In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage... CVE-2019-14370 Fix available 6.5 MediumJuly 28, 2019
• exiv2, debian linux +1 more Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a... CVE-2019-14369 Fix available 6.5 MediumJuly 28, 2019
• exiv2, debian linux +1 more There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through... CVE-2019-13504 Fix available 6.5 MediumJuly 11, 2019
• exiv2, fedoraproject fedora +1 more A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a... CVE-2019-13111 Fix available 5.5 MediumJune 30, 2019
• exiv2, fedoraproject fedora +1 more An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ... CVE-2019-13109 Fix available 6.5 MediumJune 30, 2019
• exiv2, fedoraproject fedora +1 more An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service ... CVE-2019-13108 Fix available 6.5 MediumJune 30, 2019
• exiv2, canonical ubuntu linux, debian linux +1 more +3 more http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash... CVE-2019-13114 Fix available 6.5 MediumJune 30, 2019
• exiv2, canonical ubuntu linux, fedoraproject fedora +2 more Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion... CVE-2019-13113 Fix available 6.5 MediumJune 30, 2019
• Show olderLoading…