CVE-2026-27596

Exiv2 (C++ library/CLI for EXIF/IPTC/XMP metadata) has a vulnerability in the preview component (triggered with an extra command-line arg such as -pp) where an integer underflow in LoaderNative::getData() leads to a heap buffer overflow. This affects versions prior to 0.28.8 and typically causes ...