CVE-2026-27631
published 2026-03-02CVE-2026-27631: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an…
PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
0.26%
16.9th percentile
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | exiv2 | < exiv2 0.28.8+dfsg-1 (forky) | exiv2 0.28.8+dfsg-1 (forky) |
| exiv2 | exiv2 | < 0.28.8 | 0.28.8 |
| exiv2 | exiv2 | <= 0.28.8 | — |
| exiv2 | exiv2 | >= 0 < 0.28.8+dfsg-1 | 0.28.8+dfsg-1 |
| exiv2 | exiv2 | >= 0 < 0.27.5-3ubuntu1.1 | 0.27.5-3ubuntu1.1 |
| exiv2 | exiv2 | >= 0 < 0.27.5-3ubuntu1.3 | 0.27.5-3ubuntu1.3 |
| exiv2 | exiv2 | >= 0 < 0.27.6-1ubuntu0.1 | 0.27.6-1ubuntu0.1 |
| exiv2 | exiv2 | >= 0 < 0.27.6-1ubuntu0.3 | 0.27.6-1ubuntu0.3 |
| exiv2 | exiv2 | >= 0 < 0.28.5+dfsg-1ubuntu0.1 | 0.28.5+dfsg-1ubuntu0.1 |
| exiv2 | exiv2 | >= 0 < 0.28.5+dfsg-1ubuntu0.3 | 0.28.5+dfsg-1ubuntu0.3 |
| exiv2 | exiv2 | >= 0 < 0.25-2.1ubuntu16.04.7+esm5 | 0.25-2.1ubuntu16.04.7+esm5 |
| exiv2 | exiv2 | >= 0 < 0.25-3.1ubuntu0.18.04.11+esm1 | 0.25-3.1ubuntu0.18.04.11+esm1 |
| exiv2 | exiv2 | >= 0 < 0.27.2-8ubuntu2.7+esm1 | 0.27.2-8ubuntu2.7+esm1 |
| exiv2 | exiv2 | >= 0 < 0.27.2-8ubuntu2.7+esm3 | 0.27.2-8ubuntu2.7+esm3 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv4.02.7LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
osv8.1HIGH
vendor_ubuntu8.1HIGH
vendor_debian2.7LOW
vendor_redhat2.7LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Exiv2 regression
vendor_ubuntu·2026-03-19·CVSS 8.1
CVE-2025-55304 [HIGH] Exiv2 regression
Title: Exiv2 regression
Summary: USN-8103-1 introduced a regression in Exiv2
USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression
for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
Ubuntu 25.10. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Exiv2 did not correctly handle reading certain
buffers. An attacker could possibly use this issue to leak sensitive
information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
LTS. (CVE-2020-18771)
Wen Cheng discovered that Exiv2 did not correctly handle certain memory
allocation. If a user or system were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service. This issue on
Ubuntu
Exiv2 vulnerabilities
vendor_ubuntu·2026-03-18·CVSS 8.1
CVE-2026-27631 [HIGH] Exiv2 vulnerabilities
Title: Exiv2 vulnerabilities
Summary: Several security issues were fixed in Exiv2.
It was discovered that Exiv2 did not correctly handle reading certain
buffers. An attacker could possibly use this issue to leak sensitive
information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
LTS. (CVE-2020-18771)
Wen Cheng discovered that Exiv2 did not correctly handle certain memory
allocation. If a user or system were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
(CVE-2020-18899)
It was discovered that Exiv2 did not correctly handle writing certain
metadata. If a user or system were tricked into opening a specially crafted
file, an attacker could p
Red Hat
Exiv2: Exiv2: Denial of Service via integer overflow in preview component
vendor_redhat·2026-03-02·CVSS 2.7
CVE-2026-27631 [LOW] Exiv2: Exiv2: Denial of Service via integer overflow in preview component
Exiv2: Exiv2: Denial of Service via integer overflow in preview component
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
A flaw was found in Exiv2, a C++ library and command-line utility used for managing image metadata. This vulnerability, an integer overflow, exists within the preview component. When Exiv2 is executed with a specific
Debian
CVE-2026-27631: exiv2 - Exiv2 is a C++ library and a command-line utility to read, write, delete and mod...
vendor_debian·2026·CVSS 2.7
CVE-2026-27631 [LOW] CVE-2026-27631: exiv2 - Exiv2 is a C++ library and a command-line utility to read, write, delete and mod...
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 0.28.8+dfsg-1)
sid: resolved (fixed in 0.28.8+dfsg-1)
trixie: open
OSV
exiv2 regression
osv·2026-03-19·CVSS 8.1
CVE-2020-18771 [HIGH] exiv2 regression
exiv2 regression
USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression
for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
Ubuntu 25.10. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Exiv2 did not correctly handle reading certain
buffers. An attacker could possibly use this issue to leak sensitive
information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
LTS. (CVE-2020-18771)
Wen Cheng discovered that Exiv2 did not correctly handle certain memory
allocation. If a user or system were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
(CVE-2020-
OSV
exiv2 vulnerabilities
osv·2026-03-18·CVSS 8.1
CVE-2020-18771 [HIGH] exiv2 vulnerabilities
exiv2 vulnerabilities
It was discovered that Exiv2 did not correctly handle reading certain
buffers. An attacker could possibly use this issue to leak sensitive
information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
LTS. (CVE-2020-18771)
Wen Cheng discovered that Exiv2 did not correctly handle certain memory
allocation. If a user or system were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
(CVE-2020-18899)
It was discovered that Exiv2 did not correctly handle writing certain
metadata. If a user or system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to cause a denial of
service. (CVE-2025
OSV
CVE-2026-27631: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
osv·2026-03-02·CVSS 2.7
CVE-2026-27631 [LOW] CVE-2026-27631: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-27631 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 2.7
CVE-2026-27631 [LOW] CVE-2026-27631 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-27631 :
NixOS vulnerability analysis and mitigation
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
Source : NVD
## 2.7
Score
Published March 2, 2026
Severity LOW
CNA Score 2.7
Affected Technologies
NixOS
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exp
Bugzilla
CVE-2026-27631 mingw-exiv2: Exiv2: Denial of Service via integer overflow in preview component [fedora-all]
bugzilla·2026-03-31·CVSS 2.7
CVE-2026-27631 [LOW] CVE-2026-27631 mingw-exiv2: Exiv2: Denial of Service via integer overflow in preview component [fedora-all]
CVE-2026-27631 mingw-exiv2: Exiv2: Denial of Service via integer overflow in preview component [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-2026-7f4c2d1a4e (mingw-exiv2-0.28.8-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7f4c2d1a4e
---
FEDORA-2026-5eb6f779c0 (mingw-exiv2-0.28.8-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-5eb6f779c0
---
FEDORA-2026-592e4238fa (mingw-exiv2-0.28.8-1.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproj
Bugzilla
CVE-2026-27631 Exiv2: Exiv2: Denial of Service via integer overflow in preview component
bugzilla·2026-03-02·CVSS 5.3
CVE-2026-27631 [MEDIUM] CVE-2026-27631 Exiv2: Exiv2: Denial of Service via integer overflow in preview component
CVE-2026-27631 Exiv2: Exiv2: Denial of Service via integer overflow in preview component
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
2026-03-02
Published