3215 matches found
CLSA-2025-1766500438 exiv2: Fix of CVE-2025-54080
CVE-2025-54080: fix insufficient bounds checking...
CLSA-2025-1766499581 exiv2: Fix of CVE-2025-54080
CVE-2025-54080: fix insufficient bounds checking...
Amazon Linux 2023 : exiv2, exiv2-devel, exiv2-libs (ALAS2023-2025-1296)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1296 advisory. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier...
Amazon Linux 2 : exiv2, --advisory ALAS2-2025-3086 (ALAS-2025-3086)
The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3086 advisory. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata...
Medium: exiv2
Issue Overview: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted...
Medium: exiv2
Issue Overview: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted...
TencentOS Server 4: exiv2 (TSSA-2024:0274)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0274 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
The vulnerability of the Exiv2 metadata management library commands, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.
The vulnerability of the Exiv2 metadata management library commands relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
TencentOS Server 4: exiv2 (TSSA-2025:0843)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0843 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
ROS-20251028-07
A vulnerability in the library commands for Exiv2 media file metadata management is related to the following quadratic algorithm in the ICC profile analysis code in jpegBase::readMetadata can lead to a prolonged Exiv2. Exploitation of the vulnerability could allow an attacker to cause a denial of...
Fedora: Security Advisory (FEDORA-2025-c23727e694)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-7575224d15)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 41 Update: mingw-exiv2-0.28.7-1.fc41
MinGW Windows exiv2 library...
Fedora 41 : inih / mingw-exiv2 (2025-e5ab9a2288)
The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-e5ab9a2288 advisory. Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304. Tenable has extracted the preceding description block directly from the Fedora...
Fedora: Security Advisory (FEDORA-2025-e5ab9a2288)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 42 Update: mingw-exiv2-0.28.7-1.fc42
MinGW Windows exiv2 library...
Fedora: Security Advisory (FEDORA-2025-99df814c62)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : inih / mingw-exiv2 (2025-99df814c62)
The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-99df814c62 advisory. Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304. Tenable has extracted the preceding description block directly from the Fedora...
