Linux Distros Unpatched Vulnerability : CVE-2020-18831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecifi...

Linux Distros Unpatched Vulnerability : CVE-2018-14338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms other than Apple platforms where glibc is not used, possib...

0day-buffer-overflow-in-exiv2

PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...

exiv2:fuzz-read-write: Heap-buffer-overflow in Exiv2::MemIo::write

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=6060397968031744 Project: exiv2 Fuzzing Engine: afl Fuzz Target: fuzz-read-write Job Type: aflasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x50c0000c6a73 Crash State...

Amazon Linux 2023 : exiv2, exiv2-devel, exiv2-libs (ALAS2023-2025-1049)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1049 advisory. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versio...

Medium: exiv2

Issue Overview: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line...

Oracle Linux 10 : exiv2 (ELSA-2025-7457)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7457 advisory. 0.28.3-3.2 - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106 Tenable has extracted the precedin...

TencentOS Server 4: exiv2 (TSSA-2025:0188)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0188 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RHEL 10 : exiv2 (RHSA-2025:7457)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7457 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extrac...

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24826 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-24826 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-44398 affecting package exiv2 for versions less than 0.28.3-1

CVE-2023-44398 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-39695 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-39695 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

RHSA-2025:7457 Red Hat Security Advisory: exiv2 security update

Bulletin has no description...

Alibaba Cloud Linux 3 : 0195: compat-exiv2-026 (ALINUX3-SA-2022:0195)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0195 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-18898: A stack exhaustion issue in the...

Alibaba Cloud Linux 3 : 0215: exiv2 (ALINUX3-SA-2022:0215)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0215 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-18898: A stack exhaustion issue i...

Alibaba Cloud Linux 3 : 0065: exiv2 (ALINUX3-SA-2021:0065)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0065 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-17402: Exiv2 0.27.2 allows attackers to...

Moderate: Red Hat Security Advisory: exiv2 security update

An update for exiv2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

exiv2: Use After Free in Exiv2

A heap overflow vulnerability was found in the Exiv2 library. In affected versions, the issue is triggered when Exiv2 is used to write metadata into a crafted image file. This could allow an attacker to execute code if they can trick the victim into running Exiv2 on a crafted image file. Note tha...