14 matches found
Security update for exiv2
This update for exiv2 fixes the following issues: CVE-2026-49275: out of bounds read in CrwMap::decodeBasic bsc1277791. CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. CVE-2026-68547: heap out-of-bounds write in RemoteIo when reading fro...
SUSE SLES16 Security Update : exiv2 (SUSE-SU-2026:23871-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23871-1 advisory. - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when...
Security update for exiv2 (important)
openSUSE security update: security update for exiv2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21904-1 Rating: important References: bsc1277579 bsc1277591 bsc1277791 Cross-References: CVE-2026-49275 CVE-2026-68546 CVE-2026-68547 CVSS scores:...
OESA-2026-3891 exiv2 security update
Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: Exiv2 has an out-of-bounds read...
Updated exiv2 package fixes security vulnerabilities
Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...
MGASA-2026-0379 Updated exiv2 package fixes security vulnerabilities
Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...
CVE-2026-68546
GHSA-3695-mjv8-3r52: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds...
UBUNTU-CVE-2026-68546
GHSA-3695-mjv8-3r52: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds...
UBUNTU-CVE-2026-68547
GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files...
CVE-2026-68547
GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files...
Linux Distros Unpatched Vulnerability : CVE-2026-68547
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - exiv2 - None Ubuntu Linux - GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files CVE-2026-68547...
Exiv2 < 0.28.9 Multiple Vulnerabilities
The version of Exiv2 installed on the remote host is prior to 0.28.9. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds write was found in RemoteIo::Impl::populateBlocks. The bug is in the RemoteIo class, which is only used when Exiv2 is run on a URL, rather than a local...
