Vulnerabilities in Exiv2
29 resultsVexday analysis
Exiv2 apresenta 29 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa confirmada ou crítica em CVSS, com a fraqueza dominante sendo leitura fora dos limites de buffer (CWE-125). O risco atual é baixo, sem novos registros nos últimos 90 dias, sugerindo que a maior parte das exposições já foi remediada ou está em manutenção estável.
CVE-2025-26623MEDIUMUse After Free in Exiv2EPSS 0.9%CVE-2024-39695MEDIUMExiv2 has an out-of-bounds read in AsfVideo::streamPropertiesEPSS 0.6%CVE-2026-27596LOWExiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer OverflowEPSS 0.4%CVE-2026-25884LOWExiv2: Out-of-bounds read in CrwMap::decode0x0805EPSS 0.3%CVE-2026-27631LOWExiv2: Uncaught exception - cannot create std::vector larger than max_size()EPSS 0.3%CVE-2025-55304LOWExiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadataEPSS 0.2%CVE-2024-24826MEDIUMOut-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2EPSS 0.2%CVE-2024-25112MEDIUMDenial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2EPSS 0.2%CVE-2025-54080LOWExiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS fileEPSS 0.1%