Amazon Linux 2 : exiv2 (ALAS-2026-3946)

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3946 advisory. Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds CVE-2026-68546 Tenable has...

Security update for exiv2

This update for exiv2 fixes the following issues: CVE-2026-49275: out of bounds read in CrwMap::decodeBasic bsc1277791. CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. CVE-2026-68547: heap out-of-bounds write in RemoteIo when reading fro...

SUSE-SU-2026:4374-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: heap out-of-bounds write in RemoteIo when readi...

Important: exiv2

Issue Overview: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds CVE-2026-68546 Affected Packages: exiv2 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

SUSE SLES16 Security Update : exiv2 (SUSE-SU-2026:23871-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23871-1 advisory. - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when...

OESA-2026-4088 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: Exiv2 has an out-of-bounds read...

openSUSE 16: exiv2 / exiv2-lang / libexiv2-28 / libexiv2-28-x86-64-v3 / etc (openSUSE-SU-2026:21904-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21904-1 advisory. - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading...

Security update for exiv2 (important)

openSUSE security update: security update for exiv2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21904-1 Rating: important References: bsc1277579 bsc1277591 bsc1277791 Cross-References: CVE-2026-49275 CVE-2026-68546 CVE-2026-68547 CVSS scores:...

OPENSUSE-SU-2026:21904-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: Heap out-of-bounds write in RemoteIo when readi...

SUSE-SU-2026:23871-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: Heap out-of-bounds write in RemoteIo when readi...

SUSE-SU-2026:23860-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: Heap out-of-bounds write in RemoteIo when readi...

OESA-2026-3891 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: Exiv2 has an out-of-bounds read...

MGASA-2026-0379 Updated exiv2 package fixes security vulnerabilities

Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...

Updated exiv2 package fixes security vulnerabilities

Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...

CVE-2026-68546

GHSA-3695-mjv8-3r52: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds...

CVE-2026-68547

GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files...

UBUNTU-CVE-2026-68547

GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files...

UBUNTU-CVE-2026-68546

GHSA-3695-mjv8-3r52: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds...

Linux Distros Unpatched Vulnerability : CVE-2026-68547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an out-of-bounds read flaw in the RemoteIo::Impl::populateBlocks function. When the library handles remote network streaming...

Exiv2 < 0.28.9 Multiple Vulnerabilities

The version of Exiv2 installed on the remote host is prior to 0.28.9. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds write was found in RemoteIo::Impl::populateBlocks. The bug is in the RemoteIo class, which is only used when Exiv2 is run on a URL, rather than a local...