Количество 10
Количество 10
BDU:2025-13814
Уязвимость команд библиотеки для управления метаданными медиафайлов Exiv2, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20251028-07
Множественные уязвимости exiv2
ALT-PU-2025-11094
ALT-PU-2025-11094: package `exiv2` update to version 0.28.7-alt1
CVE-2025-54080
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.
CVE-2025-54080
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.
CVE-2025-54080
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.
CVE-2025-54080
Exiv2 is a C++ library and a command-line utility to read, write, dele ...
GHSA-496f-x7cq-cq39
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
SUSE-SU-2026:2663-1
Security update for exiv2
openSUSE-SU-2026:20410-1
Security update for exiv2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-13814 Уязвимость команд библиотеки для управления метаданными медиафайлов Exiv2, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | ROS-20251028-07 Множественные уязвимости exiv2 | CVSS3: 5.5 | 11 месяцев назад | |
 | ALT-PU-2025-11094 ALT-PU-2025-11094: package `exiv2` update to version 0.28.7-alt1 | CVSS3: 5.5 | около 1 года назад | |
 | CVE-2025-54080 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-54080 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6. | CVSS3: 3.3 | 0% Низкий | около 1 года назад |
| CVE-2025-54080 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| CVE-2025-54080 Exiv2 is a C++ library and a command-line utility to read, write, dele ... | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| GHSA-496f-x7cq-cq39 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file | 0% Низкий | около 1 года назад | |
 | SUSE-SU-2026:2663-1 Security update for exiv2 | 3 месяца назад | ||
| openSUSE-SU-2026:20410-1 Security update for exiv2 | 6 месяцев назад |
Уязвимостей на страницу