Exiv2 vulnerabilities
29 CVEs and advisories name Exiv2 as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-25884Exiv2: Out-of-bounds read in CrwMap::decode0x0805
- CVE-2026-27596Exiv2: Integer Underflow in LoaderNative::getData() Causes Heap Buffer Overflow
- CVE-2026-27631Exiv2: Uncaught exception - cannot create std::vector larger than max_size()
- CVE-2025-55304Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
- CVE-2025-54080Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
- CVE-2025-26623Use After Free in Exiv2
- CVE-2024-39695Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
- CVE-2024-24826Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
- CVE-2024-25112Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
- CVE-2023-44398Out-of-bounds write in exiv2
- CVE-2021-37623Denial of service due to infinite loop in JpegBase::printStructure (#2)
- CVE-2021-37622Denial of service due to infinite loop in JpegBase::printStructure (#1)
- CVE-2021-37621Denial of service due to infinite loop in Image::printIFDStructure
- CVE-2021-37620Out-of-bounds read in XmpTextValue::read()
- CVE-2021-37619Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-37618Out-of-bounds read in Exiv2::Jp2Image::printStructure
- CVE-2021-37616Null pointer dereference in Exiv2::Internal::resolveLens0x8ff
- CVE-2021-37615Null pointer dereference in Exiv2::Internal::resolveLens0x319
- CVE-2021-34335Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff
- CVE-2021-34334Denial of service due to integer overflow in loop counter
- CVE-2021-32815Denial of service due to assertion failure in crwimage_int.cpp
- CVE-2021-32617Denial of service in Exiv2
- CVE-2021-29623Uninitialized variable bug in Exiv2
- CVE-2021-29464Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-29463Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
- CVE-2021-29473Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
- CVE-2021-29470Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-29458Out-of-bounds read in Exiv2::Internal::CrwMap::encode
- CVE-2021-29457Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata