cbcvebase.
CVE-2025-54080
published 2025-08-29

CVE-2025-54080: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in…

PriorityP420medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.13%
3.2th percentile
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianexiv2< exiv2 0.28.7+dfsg-2 (forky)exiv2 0.28.7+dfsg-2 (forky)
exiv2exiv2< 0.28.60.28.6
exiv2exiv2>= 0 < 0.28.7+dfsg-20.28.7+dfsg-2
exiv2exiv2>= 0 < 0.27.5-3ubuntu1.10.27.5-3ubuntu1.1
exiv2exiv2>= 0 < 0.27.5-3ubuntu1.30.27.5-3ubuntu1.3
exiv2exiv2>= 0 < 0.27.6-1ubuntu0.10.27.6-1ubuntu0.1
exiv2exiv2>= 0 < 0.27.6-1ubuntu0.30.27.6-1ubuntu0.3
exiv2exiv2>= 0 < 0.28.5+dfsg-1ubuntu0.10.28.5+dfsg-1ubuntu0.1
exiv2exiv2>= 0 < 0.28.5+dfsg-1ubuntu0.30.28.5+dfsg-1ubuntu0.3
exiv2exiv2>= 0 < 0.25-2.1ubuntu16.04.7+esm50.25-2.1ubuntu16.04.7+esm5
exiv2exiv2>= 0 < 0.25-3.1ubuntu0.18.04.11+esm10.25-3.1ubuntu0.18.04.11+esm1
exiv2exiv2>= 0 < 0.27.2-8ubuntu2.7+esm10.27.2-8ubuntu2.7+esm1
exiv2exiv2>= 0 < 0.27.2-8ubuntu2.7+esm30.27.2-8ubuntu2.7+esm3
exiv2exiv20 – 0.17.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv4.01.8LOWCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv8.1HIGH
vendor_ubuntu8.1HIGH
vendor_debian1.8LOW
vendor_redhat1.8LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.