488 matches found
Moderate: Red Hat Security Advisory: exiv2 security update
An update for exiv2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
ALSA-2025:7457 Moderate: exiv2 security update
Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Security Fixes: exiv2: Use After Free in Exiv...
CVE-2025-32025
bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably...
SUSE CVE-2025-32024
bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The EXIF data format allows for defining excessively large data structures in relatively small payloads. Before v0.10.0, If you didn't trust the input images, this could be abused to...
CVE-2025-32025
bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably...
CVE-2025-32025 bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing
bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably...
CVE-2025-32025 bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing
bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably...
CVE-2025-32024
CVE-2025-32024 affects the Go library bep/imagemeta used to read EXIF/IPTC/XMP metadata from JPEG, TIFF, PNG, and WebP files. The root cause is that EXIF data can define excessively large data structures, enabling a potential denial-of-service when untrusted images are processed prior to v0.10.0....
Linux Distros Unpatched Vulnerability : CVE-2021-37623
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2...
SUSE CVE-2025-26623
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++...
UBUNTU-CVE-2025-26623
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++...
CVE-2025-26623 Use After Free in Exiv2
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++...
CVE-2025-26623 Use After Free in Exiv2
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are not affected. Exiv2 is a command-line utility and C++...
Canon Small Office Multifunction Printers和Laser Printers 安全漏洞
Canon Small Office Multifunction Printers is a small office multifunction printer from Canon Japan. A security vulnerability exists in Canon Small Office Multifunction Printers and Laser Printers that originates from a buffer overflow in the processing of EXIF tags for TIFF data, which could resu...
The vulnerability of the Exiv2 metadata management library, related to buffer overflow in dynamic memory, allows a attacker to cause a service failure.
The vulnerability of the Exiv2 metadata management library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Exiv2 metadata management library, related to reading data outside of the allowed range in memory, allows a hacker to cause a service failure.
The vulnerability of the Exiv2 metadata management library relates to reading data outside the allowed range in memory when metadata is written to the created image file. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-35224
Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.28.6 Description Exiv2 is a C++ library and a command-line utility used to read, write, delete, and modify image metadata Exif, IPTC, XMP, and ICC. A denial-of-service issue was identified in the ICC profile parsing...
The vulnerability of the exif_entry_get_value() function in the exif-entry.c component of the Libexif library for EXIF-file parsing allows a hacker to access confidential data and cause service interruptions. This vulnerability is related to reading beyond the allowed buffer size.
The vulnerability of the exifentrygetvalue function in the exif-entry.c component of the Libexif library for EXIF-file parsing involves reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as cause...
PT-2024-39373 · Unknown +1 · Freeimage Library +1
Name of the Vulnerable Software and Affected Versions: freeimage library affected versions not specified Description: A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read iptc profile function in the Source/Metadata/IPTC.cpp file...
