Astra Linux – vulnerability in exiv2

Exiv2 is a C++ library and a command-line utility for reading, writing, deleting, and modifying Exif, IPTC, XMP, and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read vulnerability was found in Exiv2. The vulnerability resides in the preview component; it is triggered only when...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

JLSEC-2026-1316

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8...

RLSA-2026:20929 Moderate: libexif security update

The libexif packages provide a library for extracting extra information from image files. Security Fixes: libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling CVE-2026-40385 libexif: libexif: Denial of Service and information disclosure via integer...

a3m (0.1.0), aio-nxapi (0.3.1) +66 more potentially affected by CVE-2026-41066 via lxml (4.5.2)

lxml PYPI version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - a3m 0.1.0 - aio-nxapi 0.3.1 - ansible-playbook-grapher 0.10.0 - bas-metadata-library =0.3.0, =1.0.0, =2.0.1.post4, =2020.7.1, =3.16.0.dev2, =0.2.2,...

[SECURITY] Fedora 43 Update: libexif-0.6.26-1.fc43

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...

Amazon Linux 2 : exiv2, --advisory ALAS2-2026-3201 (ALAS-2026-3201)

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3201 advisory. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata...

AZL-78624 CVE-2026-27596 affecting package exiv2 0.28.0-1

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra...

UBUNTU-CVE-2026-27596

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra...

CVE-2026-27596

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra...

EUVD-2026-9262

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra...

CVE-2026-27631

CVE-2026-27631 affects the Exiv2 library/editor. The vulnerability resides in the preview component and is triggered when Exiv2 is run with an extra command line argument (e.g., -pp). An integer overflow can cause code to attempt to create a huge std::vector, leading to a crash via an uncaught ex...

Exiv2 buffer error vulnerability

Exiv2 is a C++ library and command-line application developed by Andreas Huggel, designed for managing image metadata. This product provides functionality for reading and writing image metadata in various formats such as EXIF, IPTC, and XMP. Versions of Exiv2 prior to 0.28.8 contained a buffer...

CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...

EUVD-2025-199286

Malicious code in @sme-ui/aoma-vevasound-metadata-lib npm...

Exiv2 jpegBase::readMetadata() DoS

The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Malicious Package

Overview metadata-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-32641

Malicious code in metadata-lib npm...

MAL-2025-47999 Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...

OESA-2025-2117 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...