Priority LOW 20
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
Vulnerabilities
124 records
TI-2026-21982 CVE-2026-27596
Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow
Priority LOW 20
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
TI-2026-22013 CVE-2026-27631
Exiv2: Uncaught exception - cannot create std::vector larger than max_size()
Priority LOW 19
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
TI-2025-34959 CVE-2025-55304 · GHSA-m54q-mm9w-fp6g
Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
Priority LOW 10
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
TI-2025-33923 CVE-2025-54080 · GHSA-496f-x7cq-cq39
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Priority MEDIUM 43
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
TI-2025-19560 CVE-2025-26623 · GHSA-38h4-fx85-qcx7
Use After Free in Exiv2
Priority MEDIUM 63
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
Priority LOW 36
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
TI-2024-16343 CVE-2024-24826 · GHSA-g9xm-7538-mq8w
Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
Priority LOW 24
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
TI-2024-16567 CVE-2024-25112 · GHSA-crmj-qh74-2r36
Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
Priority LOW 24
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
TI-2023-23904 CVE-2023-44398
Out-of-bounds write in exiv2
Priority MEDIUM 42
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
TI-2020-13478 CVE-2020-18831 · GHSA-xwp4-phw7-5mfh
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1…
Priority HIGH 69
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
TI-2020-13472 CVE-2020-18774 · GHSA-wqqc-qm65-p7r6
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0…
Priority LOW 31
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
TI-2020-13471 CVE-2020-18773 · GHSA-v3cf-r46q-8rgm
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows…
Priority LOW 32
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
TI-2020-13470 CVE-2020-18771 · GHSA-q7h8-cc9p-3543
Exiv2 0.27.99.0 has a global buffer over-read in…
Priority LOW 39
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.
TI-2020-13490 CVE-2020-18898 · GHSA-g97p-564p-26xp
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote…
Priority LOW 32
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
TI-2020-13491 CVE-2020-18899 · GHSA-44mj-pwh6-pw78
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of…
Priority MEDIUM 62
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
TI-2021-15495 CVE-2021-37620
Out-of-bounds read in XmpTextValue::read()
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.