CVE-2023-44398 affecting package exiv2 for versions less than 0.28.3-1

CVE-2023-44398 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-25112 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

RHSA-2025:7457 Red Hat Security Advisory: exiv2 security update

Bulletin has no description...

Alibaba Cloud Linux 3 : 0195: compat-exiv2-026 (ALINUX3-SA-2022:0195)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0195 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-18898: A stack exhaustion issue in the...

Alibaba Cloud Linux 3 : 0065: exiv2 (ALINUX3-SA-2021:0065)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0065 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-17402: Exiv2 0.27.2 allows attackers to...

Alibaba Cloud Linux 3 : 0215: exiv2 (ALINUX3-SA-2022:0215)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0215 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-18898: A stack exhaustion issue i...

Moderate: Red Hat Security Advisory: exiv2 security update

An update for exiv2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

exiv2: Use After Free in Exiv2

A heap overflow vulnerability was found in the Exiv2 library. In affected versions, the issue is triggered when Exiv2 is used to write metadata into a crafted image file. This could allow an attacker to execute code if they can trick the victim into running Exiv2 on a crafted image file. Note tha...

ALSA-2025:7457 Moderate: exiv2 security update

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Security Fixes: exiv2: Use After Free in Exiv...

Out-of-bounds write in exiv2

...

Exiv2 has an out-of-bounds read in AsfVideo::streamProperties

...

Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2

...

Linux Distros Unpatched Vulnerability : CVE-2021-34335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to...

Linux Distros Unpatched Vulnerability : CVE-2021-37615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found ...

Linux Distros Unpatched Vulnerability : CVE-2021-37622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2...

Linux Distros Unpatched Vulnerability : CVE-2024-24826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in...

Linux Distros Unpatched Vulnerability : CVE-2021-34334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when...

Linux Distros Unpatched Vulnerability : CVE-2021-37616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found ...

Linux Distros Unpatched Vulnerability : CVE-2021-37621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2...

Linux Distros Unpatched Vulnerability : CVE-2021-37623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2...