pkg:Debian/exiv2

所有已知漏洞

• CRITICAL9.8CVE-2025-26623Exiv2 allows Use After Free
  from 0, < 0.28.4+dfsg-2
• CRITICAL9.8CVE-2018-11531Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.
  from 0, < 0.25-4
• HIGH8.8CVE-2019-9144An issue was discovered in Exiv2 0.27.
  from 0, < 0.27.2-8
• HIGH8.8CVE-2019-9143An issue was discovered in Exiv2 0.27.
  from 0, < 0.27.2-8
• HIGH8.8CVE-2018-12265Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in ba…
  from 0, < 0.25-4
• HIGH8.8CVE-2018-12264Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea…
  from 0, < 0.25-4
• HIGH8.1CVE-2026-25884Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
  from 0
• HIGH8.1CVE-2020-18771Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an in…
  from 0, < 0.27.2-6
• HIGH8.1CVE-2018-14338samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where gl…
  from 0
• HIGH8.1CVE-2018-9144In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp.
  from 0, < 0.27.2-6
• HIGH7.8CVE-2020-18831Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of servic…
  from 0, < 0.27.2-6
• HIGH7.8CVE-2021-29464Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• HIGH7.8CVE-2021-29457Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u1
• HIGH7.5CVE-2026-27596Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
  from 0
• HIGH7.5CVE-2021-31292An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of…
  from 0, < 0.27.3-3+deb11u1
• HIGH7.5CVE-2019-20421exiv2 - security update
  from 0, < 0.25-4+deb10u2
• HIGH7.5CVE-2019-20421exiv2 - security update
  from 0, < 0.25-3.1+deb9u3
• HIGH7.5CVE-2019-20421exiv2 - security update
  from 0, < 0.27.2-8
• HIGH7.5CVE-2017-11591exiv2 - security update
  from 0, < 0.23-1+deb7u2
• HIGH7.5CVE-2017-11591exiv2 - security update
  from 0, < 0.27.2-6
• HIGH7.5CVE-2017-11591exiv2 - security update
  from 0, < 0.25-4+deb10u4
• MEDIUM6.5CVE-2020-18774A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) vi…
  from 0
• MEDIUM6.5CVE-2020-18773An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a cr…
  from 0
• MEDIUM6.5CVE-2020-18898A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a c…
  from 0
• MEDIUM6.5CVE-2020-18899An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of se…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2020-19716A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2021-29470Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM6.5CVE-2021-3482A flaw was found in Exiv2 in versions before and including 0.27.4-RC1.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM6.5CVE-2019-17402exiv2 - security update
  from 0, < 0.24-4.1+deb8u5
• MEDIUM6.5CVE-2019-17402exiv2 - security update
  from 0, < 0.27.3-1
• MEDIUM6.5CVE-2019-14370In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp.
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-14369Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-re…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13504exiv2 - security update
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13504exiv2 - security update
  from 0, < 0.24-4.1+deb8u4
• MEDIUM6.5CVE-2019-13114http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by ret…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13113Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13112A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13110A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of serv…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13109An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2019-13108An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-20097There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3.
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-19535In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-19108In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) ca…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-19107In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-17581exiv2 - security update
  from 0, < 0.24-4.1+deb8u3
• MEDIUM6.5CVE-2018-17581exiv2 - security update
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-16336Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read)…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-11037In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a craf…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2018-10999An issue was discovered in Exiv2 0.26.
  from 0, < 0.25-4
• MEDIUM6.5CVE-2018-10998An issue was discovered in Exiv2 0.26.
  from 0, < 0.25-4
• MEDIUM6.5CVE-2018-10958exiv2 - security update
  from 0, < 0.24-4.1+deb8u2
• MEDIUM6.5CVE-2018-10958exiv2 - security update
  from 0, < 0.25-3.1+deb9u1
• MEDIUM6.5CVE-2018-10958exiv2 - security update
  from 0, < 0.25-4
• MEDIUM6.5CVE-2018-10958exiv2 - security update
  from 0, < 0.24-4.1+deb8u1
• MEDIUM6.5CVE-2018-8976In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds rea…
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2017-11683exiv2 - security update
  from 0, < 0.27.2-6
• MEDIUM6.5CVE-2017-11683exiv2 - security update
  from 0, < 0.25-4+deb10u3
• MEDIUM6.5CVE-2017-9239exiv2 - security update
  from 0, < 0.23-1+deb7u1
• MEDIUM6.5CVE-2017-9239exiv2 - security update
  from 0, < 0.25-3.1
• MEDIUM5.5CVE-2025-55304Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata
  from 0
• MEDIUM5.5CVE-2025-54080Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file
  from 0
• MEDIUM5.5CVE-2024-25112Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder
  from 0
• MEDIUM5.5CVE-2024-24826Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder
  from 0
• MEDIUM5.5CVE-2021-37615Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-34335Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37622Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37621Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37620Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37619Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37618Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37616Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-37623Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-34334Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-32815Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-32617Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0
• MEDIUM5.5CVE-2021-29463Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2021-29458Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
  from 0, < 0.27.3-3+deb11u2
• MEDIUM5.5CVE-2017-18005Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
  from 0, < 0.27.2-6
• MEDIUM5.5CVE-2017-17669There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26.
  from 0, < 0.27.2-6
• MEDIUM5.5CVE-2017-14864An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26.
  from 0, < 0.27.2-6
• MEDIUM5.5CVE-2017-14862An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26.
  from 0, < 0.27.2-6
• MEDIUM5.5CVE-2017-14859An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26.
  from 0, < 0.27.2-6
• MEDIUM5.3CVE-2026-27631Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
  from 0
• LOW3.3CVE-2021-29623Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
  from 0, < 0.27.3-3+deb11u2
• LOW2.5CVE-2021-29473Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
  from 0, < 0.27.3-3+deb11u2
• —CVE-2014-9449Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of serv…
  from 0, < 0.24-4.1
• —CVE-2008-2696Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Ni…
  from 0, < 0.17-1
• —CVE-2007-6353exiv2 - arbitrary code execution
  from 0, < 0.15-2
• —CVE-2007-6353exiv2 - arbitrary code execution
  from 0, < 0.10-1.5
• —CVE-2005-4676Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote…
  from 0, < 0.9