- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 15 · 1 high, 4 medium, 2 low
- Registry
- PyPI
Advisories 15
- CVE-2025-55304Low 1.8
Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
Affected: through 0.17.3.
- CVE-2025-54080Low 1.8
Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
Affected: through 0.17.3.
- CVE-2025-26623Medium 5.3
Use After Free in Exiv2
Affected: from 0.28.0, fixed in 0.28.5.
- CVE-2024-24826Medium 5.5
Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
Affected: from 0.16.0, fixed in 0.16.1.
- CVE-2024-25112Medium 5.5
Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
Affected: from 0.16.0, fixed in 0.16.1.
- CVE-2023-44398High 8.8
Out-of-bounds write in exiv2
Affected: all versions.
- CVE-2020-18831Unrated
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of…
Affected: all versions.
- CVE-2020-18899Medium 6.5
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of…
Affected: all versions.
- CVE-2021-31292Unrated
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of…
Affected: all versions.
- CVE-2019-13114Unrated
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by…
Affected: version range not reported.
- CVE-2018-20099Unrated
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3.
Affected: all versions.
- CVE-2018-20098Unrated
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3.
Affected: all versions.
- CVE-2018-20096Unrated
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3.
Affected: all versions.
- CVE-2018-20097Unrated
There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3.
Affected: all versions.
- CVE-2017-9239Unrated
An issue was discovered in Exiv2 0.26.
Affected: all versions.