EX
Product
exiv2
124
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 24Medium 93Low 2
Watch
Add exiv2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-19535 | 6.5 | Nov 26 | In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a… Affected: through 0.26 |
| CVE-2018-19108 | 6.5 | Nov 8 | In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a… Affected: 0.26 |
| CVE-2018-19107 | 6.5 | Nov 8 | In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by… Affected: 0.26 |
| CVE-2018-18915 | 6.5 | Nov 3 | There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1 Affected: 0.27 |
| CVE-2018-17581 | 6.5 | Sep 28 | CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service Affected: 0.26; 0.27 |
| CVE-2018-17282 | 6.5 | Sep 20 | An issue was discovered in Exiv2 v0.26 Affected: 0.26 |
| CVE-2018-17230 | 6.5 | Sep 19 | Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file Affected: 0.26 |
| CVE-2018-17229 | 6.5 | Sep 19 | Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file Affected: 0.26 |
| CVE-2018-16336 | 6.5 | Sep 2 | Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different… Affected: 0.26 |
| CVE-2018-11037 | 6.5 | May 14 | In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file Affected: 0.26 |
| CVE-2018-10999 | 6.5 | May 12 | An issue was discovered in Exiv2 0.26 Affected: 0.26 |
| CVE-2018-10998 | 6.5 | May 12 | An issue was discovered in Exiv2 0.26 Affected: 0.26 |
| CVE-2018-10958 | 6.5 | May 10 | In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call Affected: 0.26 |
| CVE-2018-10780 | 6.5 | May 7 | Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read Affected: 0.26 |
| CVE-2018-10772 | 6.5 | May 7 | The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact… Affected: through 0.26 |
| CVE-2018-9304 | 6.5 | Apr 4 | In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service Affected: before 0.26 |
| CVE-2018-9303 | 6.5 | Apr 4 | In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort Affected: before 0.26 |
| CVE-2018-9145 | 6.5 | Mar 30 | In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size Affected: 0.26 |
| CVE-2018-8977 | 6.5 | Mar 25 | In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory access) via a crafted file Affected: 0.26 |
| CVE-2018-8976 | 6.5 | Mar 25 | In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file Affected: 0.26 |
| CVE-2017-17725 | 6.5 | Feb 12 | In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp Affected: 0.26 |
| CVE-2017-17724 | 6.5 | Feb 12 | In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case Affected: 0.26 |
| CVE-2017-17722 | 6.5 | Feb 12 | In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file Affected: 0.26 |
| CVE-2017-12957 | 6.5 | Aug 18 | There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp Affected: 0.26 |
| CVE-2017-12956 | 6.5 | Aug 18 | There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service Affected: 0.26 |
| CVE-2017-11683 | 6.5 | Jul 27 | There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via… Affected: 0.26 |
| CVE-2017-11340 | 6.5 | Jul 17 | There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call Affected: 0.26 |
| CVE-2017-11339 | 6.5 | Jul 17 | There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26 Affected: 0.26 |
| CVE-2017-11338 | 6.5 | Jul 17 | There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26 Affected: 0.26 |
| CVE-2017-11337 | 6.5 | Jul 17 | There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26 Affected: 0.26 |
| CVE-2017-11336 | 6.5 | Jul 17 | There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26 Affected: 0.26 |
| CVE-2017-9239 | 6.5 | May 26 | An issue was discovered in Exiv2 0.26 Affected: 0.26 |
| CVE-2025-55304 | 5.5 | Aug 29 | Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata Affected: < 0.28.6 |
| CVE-2025-54080 | 5.5 | Aug 29 | Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file Affected: < 0.28.6 |
| CVE-2021-37615 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-34335 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-37622 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-37621 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-37620 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: before 0.27.5 |
| CVE-2021-37619 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-37618 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-37616 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-37623 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-34334 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-32815 | 5.5 | Aug 9 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: through 0.27.4 |
| CVE-2021-32617 | 5.5 | May 17 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: before 0.27.4 |
| CVE-2021-29463 | 5.5 | Apr 30 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: before 0.27.4 |
| CVE-2021-29458 | 5.5 | Apr 19 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files Affected: before 0.27.4 |
| CVE-2019-13111 | 5.5 | Jun 30 | A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via… Affected: through 0.27.1 |
| CVE-2018-5772 | 5.5 | Jan 18 | In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file Affected: 0.26 |
