Login Request a demo
EX
Vendor
Exiv2
1 product with CVEs on record
124
CVEs
0
On KEV
0
New 30D
Products
EX
exiv2
Exiv2
9.8
124 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-25884
EX
exiv2
Exiv2
8.1
0%
Mar 2Exiv2: Out-of-bounds read in CrwMap::decode0x0805
CVE-2026-27596
EX
exiv2
Exiv2
7.5
0%
Mar 2Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow
CVE-2026-27631
EX
exiv2
Exiv2
5.3
0%
Mar 2Exiv2: Uncaught exception - cannot create std::vector larger than max_size()
CVE-2025-55304
EX
exiv2
Exiv2
5.5
0%
Aug 29Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
CVE-2025-54080
EX
exiv2
Exiv2
5.5
0%
Aug 29Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
CVE-2025-26623
EX
exiv2
Exiv2
9.8
1%
Feb 18Use After Free in Exiv2
CVE-2024-39695
EX
exiv2
Exiv2
6.5
1%
Jul 8Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
CVE-2024-24826
EX
exiv2
Exiv2
5.0
0%
Feb 12Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
CVE-2024-25112
EX
exiv2
Exiv2
5.0
0%
Feb 12Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
CVE-2023-44398
EX
Exiv2
Exiv2
8.8
1%
Nov 6Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
CVE-2020-18831
EX
Exiv2
Exiv2
7.8
1%
Aug 22Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use…
CVE-2020-18774
EX
Exiv2
Exiv2
6.5
1%
Aug 23A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file
CVE-2020-18773
EX
Exiv2
Exiv2
6.5
1%
Aug 23An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file
CVE-2020-18771
EX
Exiv2
Exiv2
8.1
2%
Aug 23Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak
CVE-2020-18899
EX
Exiv2
Exiv2
6.5
2%
Aug 19An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input
CVE-2020-18898
EX
Exiv2
Exiv2
6.5
1%
Aug 19A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file
CVE-2021-37615
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-34335
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37622
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37621
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37620
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37619
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37618
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37616
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-37623
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-34334
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-32815
EX
Exiv2
Exiv2
5.5
1%
Aug 9Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-31292
EX
Exiv2
Exiv2
7.5
3%
Jul 26An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata
CVE-2020-19716
EX
Exiv2
Exiv2
6.5
1%
Jul 13A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS)
CVE-2021-32617
EX
Exiv2
Exiv2
5.5
1%
May 17Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-29623
EX
Exiv2
Exiv2
3.3
1%
May 13Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
CVE-2021-29464
EX
Exiv2
Exiv2
7.8
1%
Apr 30Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-29463
EX
Exiv2
Exiv2
5.5
1%
Apr 30Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-29473
EX
Exiv2
Exiv2
2.5
2%
Apr 26Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
CVE-2021-29470
EX
Exiv2
Exiv2
6.5
2%
Apr 23Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-29458
EX
Exiv2
Exiv2
5.5
2%
Apr 19Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-29457
EX
Exiv2
Exiv2
7.8
2%
Apr 19Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
CVE-2021-3482
EX
Exiv2
Exiv2
6.5
2%
Apr 8A flaw was found in Exiv2 in versions before and including 0.27.4-RC1
CVE-2019-20421
EX
Exiv2
Exiv2
7.5
4%
Jan 27In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption
CVE-2019-17402
EX
Exiv2
Exiv2
6.5
2%
Oct 9Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there…
CVE-2019-14982
EX
Exiv2
Exiv2
6.5
2%
Aug 12In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp
CVE-2019-14370
EX
Exiv2
Exiv2
6.5
1%
Jul 28In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp
CVE-2019-14369
EX
Exiv2
Exiv2
6.5
1%
Jul 28Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file
CVE-2019-14368
EX
Exiv2
Exiv2
7.8
1%
Jul 28Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp
CVE-2019-13504
EX
Exiv2
Exiv2
6.5
2%
Jul 11There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2
CVE-2019-13114
EX
Exiv2
Exiv2
6.5
2%
Jun 30http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a…
CVE-2019-13113
EX
Exiv2
Exiv2
6.5
2%
Jun 30Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file
CVE-2019-13112
EX
Exiv2
Exiv2
6.5
2%
Jun 30A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via…
CVE-2019-13111
EX
Exiv2
Exiv2
5.5
1%
Jun 30A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via…
CVE-2019-13110
EX
Exiv2
Exiv2
6.5
2%
Jun 30A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image…
CVE-2019-13109
EX
Exiv2
Exiv2
6.5
2%
Jun 30An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a…
CVE-2019-13108
EX
Exiv2
Exiv2
6.5
1%
Jun 30An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a…
CVE-2019-9144
EX
Exiv2
Exiv2
8.8
3%
Feb 25An issue was discovered in Exiv2 0.27
CVE-2019-9143
EX
Exiv2
Exiv2
8.8
3%
Feb 25An issue was discovered in Exiv2 0.27
CVE-2018-20099
EX
Exiv2
Exiv2
6.5
2%
Dec 12There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3
CVE-2018-20098
EX
Exiv2
Exiv2
6.5
3%
Dec 12There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3
CVE-2018-20097
EX
Exiv2
Exiv2
6.5
2%
Dec 12There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3
CVE-2018-20096
EX
Exiv2
Exiv2
6.5
3%
Dec 12There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3
CVE-2018-19607
EX
Exiv2
Exiv2
6.5
3%
Nov 27Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file
CVE-2018-19535
EX
Exiv2
Exiv2
6.5
2%
Nov 26In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a…