Debian Exiv2 vulnerabilities

CVE-2025-26623 [MEDIUM] CVE-2025-26623: exiv2 - Exiv2 is a C++ library and a command-line utility to read, write, delete and mod... Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata

CVE-2018-11531 [CRITICAL] CVE-2018-11531: exiv2 - Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. Scope: local bookworm: resolved (fixed in 0.25-4) bullseye: resolved (fixed in 0.25-4) forky: resolved (fixed in 0.25-4) sid: resolved (fixed in 0.25-4) trixie: resolved (fixed in 0.25-4)

CVE-2021-29457 [HIGH] CVE-2021-29457: exiv2 - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, ... Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution,

CVE-2005-4676 [MEDIUM] CVE-2005-4676: exiv2 - Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strin... Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata. Scope: local bookworm: resolved (fixed in 0.9) bullseye: resolved (fixed in 0.9) forky: resolved (fixed in 0.9) sid: resolved (fixed

CVE-2026-27596 [LOW] CVE-2026-27596: exiv2 - Exiv2 is a C++ library and a command-line utility to read, write, delete and mod... Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. The out-of-bounds read is at a 4GB offset,

CVE-2018-12265 [HIGH] CVE-2018-12265: exiv2 - Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, l... Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. Scope: local bookworm: resolved (fixed in 0.25-4) bullseye: resolved (fixed in 0.25-4) forky: resolved (fixed in 0.25-4) sid: resolved (fixed in 0.25-4) trixie: resolved (fixed in 0.25-4)

CVE-2007-6353 [HIGH] CVE-2007-6353: exiv2 - Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers... Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. Scope: local bookworm: resolved (fixed in 0.15-2) bullseye: resolved (fixed in 0.15-2) forky: resolved (fixed in 0.15-2) sid: resolved (fixed in 0.15-2) trixie: resolved (fixed in 0.15-2)

CVE-2019-9143 [HIGH] CVE-2019-9143: exiv2 - An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Ima... An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Scope: local bookworm: resolved (fixed in 0.27.2-8) bullseye: resolved (fixed in 0.27.2-8) f

CVE-2020-18771 [HIGH] CVE-2020-18771: exiv2 - Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNot... Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak. Scope: local bookworm: resolved (fixed in 0.27.2-6) bullseye: resolved (fixed in 0.27.2-6) forky: resolved (fixed in 0.27.2-6) sid: resolved (fixed in 0.27.2-6) trixie: resolved (fixed in 0.27.2-6)

CVE-2021-29464 [LOW] CVE-2021-29464: exiv2 - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, ... Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, i

CVE-2021-31292 [HIGH] CVE-2021-31292: exiv2 - An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to ... An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata. Scope: local bookworm: resolved (fixed in 0.27.3-3.1) bullseye: resolved (fixed in 0.27.3-3+deb11u1) forky: resolved (fixed in 0.27.3-3.1) sid: resolved (fixed in 0.27.3-3.1) trixie: resolved (fi

CVE-2026-25884 [LOW] CVE-2026-25884: exiv2 - Exiv2 is a C++ library and a command-line utility to read, write, delete and mod... Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 0.28.8+dfsg-1) sid: resolve

CVE-2018-12264 [HIGH] CVE-2018-12264: exiv2 - Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leadin... Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. Scope: local bookworm: resolved (fixed in 0.25-4) bullseye: resolved (fixed in 0.25-4) forky: resolved (fixed in 0.25-4) sid: resolved (fixed in 0.25-4) trixie: resolved (fixed in 0.25-4)

CVE-2019-9144 [HIGH] CVE-2019-9144: exiv2 - An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffIma... An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. Scope: local bookworm: resolved (fixed in 0.27.2-8) bullseye: resolved (fixed in 0.27.2-8) fork

CVE-2019-20421 [HIGH] CVE-2019-20421: exiv2 - In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can r... In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 0.27.2-8) bullseye: resolved (fixed in 0.27.2-8) forky: resolved (fixed in 0.27.2-8)

CVE-2021-3482 [MEDIUM] CVE-2021-3482: exiv2 - A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper ... A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. Scope: local bookworm: resolved (fixed in 0.27.5-1) bullseye: resolved (fixed in 0.27.3-3+deb11u2) fork

CVE-2017-11591 [HIGH] CVE-2017-11591: exiv2 - There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.... There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input. Scope: local bookworm: resolved (fixed in 0.27.2-6) bullseye: resolved (fixed in 0.27.2-6) forky: resolved (fixed in 0.27.2-6) sid: resolved (fixed in 0.27.2-6) trixie: resolved (fixed in 0.27.2-6)

CVE-2018-9144 [HIGH] CVE-2018-9144: exiv2 - In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString... In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure. Scope: local bookworm: resolved (fixed in 0.27.2-6) bullseye: resolved (fixed in 0.27.2-6) forky: resolved (fixed in 0.27.2-6) sid: resolved (fixed in 0.27.2-6) trixie: resolved (fixed in 0.27.2-6)

CVE-2020-18831 [HIGH] CVE-2020-18831: exiv2 - Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2... Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. Scope: local bookworm: resolved (fixed in 0.27.2-6) bullseye: resolved (fixed in 0.27.2-6) forky: resolved (fixed in 0.27.2-6) sid: resolved (fixed in 0.27.2-6) trixie: resol

CVE-2021-29470 [MEDIUM] CVE-2021-29470: exiv2 - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, ... Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial