Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/29 3:15 p.m.7 views

AZL-66708 CVE-2025-55304 affecting package exiv2 0.28.3-1

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata can cause Exiv2 to run for a long time...

5.5CVSS5.8AI score0.00226EPSS
SaveExploits1References1
Rows per page
Query Builder