Vulnerability-Lookup

OPENSUSE-SU-2026:10298-1

Vulnerability from csaf_opensuse - Published: 2026-03-07 00:00 - Updated: 2026-03-07 00:00

Summary

exiv2-0.28.8-1.1 on GA media

Notes

Title of the patch

exiv2-0.28.8-1.1 on GA media

Description of the patch

These are all security issues fixed in the exiv2-0.28.8-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2026-10298

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "exiv2-0.28.8-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the exiv2-0.28.8-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10298",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10298-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-26623 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-26623/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-54080 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-54080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-55304 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-55304/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25884 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25884/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27631 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27631/"
      }
    ],
    "title": "exiv2-0.28.8-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-03-07T00:00:00Z",
      "generator": {
        "date": "2026-03-07T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10298-1",
      "initial_release_date": "2026-03-07T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-03-07T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exiv2-0.28.8-1.1.aarch64",
                "product": {
                  "name": "exiv2-0.28.8-1.1.aarch64",
                  "product_id": "exiv2-0.28.8-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "exiv2-lang-0.28.8-1.1.aarch64",
                "product": {
                  "name": "exiv2-lang-0.28.8-1.1.aarch64",
                  "product_id": "exiv2-lang-0.28.8-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-0.28.8-1.1.aarch64",
                "product": {
                  "name": "libexiv2-28-0.28.8-1.1.aarch64",
                  "product_id": "libexiv2-28-0.28.8-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
                "product": {
                  "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
                  "product_id": "libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-devel-0.28.8-1.1.aarch64",
                "product": {
                  "name": "libexiv2-devel-0.28.8-1.1.aarch64",
                  "product_id": "libexiv2-devel-0.28.8-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exiv2-0.28.8-1.1.ppc64le",
                "product": {
                  "name": "exiv2-0.28.8-1.1.ppc64le",
                  "product_id": "exiv2-0.28.8-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "exiv2-lang-0.28.8-1.1.ppc64le",
                "product": {
                  "name": "exiv2-lang-0.28.8-1.1.ppc64le",
                  "product_id": "exiv2-lang-0.28.8-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-0.28.8-1.1.ppc64le",
                "product": {
                  "name": "libexiv2-28-0.28.8-1.1.ppc64le",
                  "product_id": "libexiv2-28-0.28.8-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
                "product": {
                  "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
                  "product_id": "libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-devel-0.28.8-1.1.ppc64le",
                "product": {
                  "name": "libexiv2-devel-0.28.8-1.1.ppc64le",
                  "product_id": "libexiv2-devel-0.28.8-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exiv2-0.28.8-1.1.s390x",
                "product": {
                  "name": "exiv2-0.28.8-1.1.s390x",
                  "product_id": "exiv2-0.28.8-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "exiv2-lang-0.28.8-1.1.s390x",
                "product": {
                  "name": "exiv2-lang-0.28.8-1.1.s390x",
                  "product_id": "exiv2-lang-0.28.8-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-0.28.8-1.1.s390x",
                "product": {
                  "name": "libexiv2-28-0.28.8-1.1.s390x",
                  "product_id": "libexiv2-28-0.28.8-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
                "product": {
                  "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
                  "product_id": "libexiv2-28-x86-64-v3-0.28.8-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-devel-0.28.8-1.1.s390x",
                "product": {
                  "name": "libexiv2-devel-0.28.8-1.1.s390x",
                  "product_id": "libexiv2-devel-0.28.8-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exiv2-0.28.8-1.1.x86_64",
                "product": {
                  "name": "exiv2-0.28.8-1.1.x86_64",
                  "product_id": "exiv2-0.28.8-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "exiv2-lang-0.28.8-1.1.x86_64",
                "product": {
                  "name": "exiv2-lang-0.28.8-1.1.x86_64",
                  "product_id": "exiv2-lang-0.28.8-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-0.28.8-1.1.x86_64",
                "product": {
                  "name": "libexiv2-28-0.28.8-1.1.x86_64",
                  "product_id": "libexiv2-28-0.28.8-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
                "product": {
                  "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
                  "product_id": "libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libexiv2-devel-0.28.8-1.1.x86_64",
                "product": {
                  "name": "libexiv2-devel-0.28.8-1.1.x86_64",
                  "product_id": "libexiv2-devel-0.28.8-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-0.28.8-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64"
        },
        "product_reference": "exiv2-0.28.8-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-0.28.8-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le"
        },
        "product_reference": "exiv2-0.28.8-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-0.28.8-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x"
        },
        "product_reference": "exiv2-0.28.8-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-0.28.8-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64"
        },
        "product_reference": "exiv2-0.28.8-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-lang-0.28.8-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64"
        },
        "product_reference": "exiv2-lang-0.28.8-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-lang-0.28.8-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le"
        },
        "product_reference": "exiv2-lang-0.28.8-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-lang-0.28.8-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x"
        },
        "product_reference": "exiv2-lang-0.28.8-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exiv2-lang-0.28.8-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64"
        },
        "product_reference": "exiv2-lang-0.28.8-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-0.28.8-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64"
        },
        "product_reference": "libexiv2-28-0.28.8-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-0.28.8-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le"
        },
        "product_reference": "libexiv2-28-0.28.8-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-0.28.8-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x"
        },
        "product_reference": "libexiv2-28-0.28.8-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-0.28.8-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64"
        },
        "product_reference": "libexiv2-28-0.28.8-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64"
        },
        "product_reference": "libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le"
        },
        "product_reference": "libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x"
        },
        "product_reference": "libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64"
        },
        "product_reference": "libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-devel-0.28.8-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64"
        },
        "product_reference": "libexiv2-devel-0.28.8-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-devel-0.28.8-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le"
        },
        "product_reference": "libexiv2-devel-0.28.8-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-devel-0.28.8-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x"
        },
        "product_reference": "libexiv2-devel-0.28.8-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libexiv2-devel-0.28.8-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
        },
        "product_reference": "libexiv2-devel-0.28.8-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-26623",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-26623"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `fixiso`. The bug is fixed in version v0.28.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-26623",
          "url": "https://www.suse.com/security/cve/CVE-2025-26623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1237347 for CVE-2025-26623",
          "url": "https://bugzilla.suse.com/1237347"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-26623"
    },
    {
      "cve": "CVE-2025-54080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-54080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-54080",
          "url": "https://www.suse.com/security/cve/CVE-2025-54080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248962 for CVE-2025-54080",
          "url": "https://bugzilla.suse.com/1248962"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-54080"
    },
    {
      "cve": "CVE-2025-55304",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-55304"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file. The bug is fixed in version 0.28.6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-55304",
          "url": "https://www.suse.com/security/cve/CVE-2025-55304"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248963 for CVE-2025-55304",
          "url": "https://bugzilla.suse.com/1248963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-55304"
    },
    {
      "cve": "CVE-2026-25884",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25884"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25884",
          "url": "https://www.suse.com/security/cve/CVE-2026-25884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259083 for CVE-2026-25884",
          "url": "https://bugzilla.suse.com/1259083"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25884"
    },
    {
      "cve": "CVE-2026-27631",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27631"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
          "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27631",
          "url": "https://www.suse.com/security/cve/CVE-2026-27631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259085 for CVE-2026-27631",
          "url": "https://bugzilla.suse.com/1259085"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:exiv2-lang-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-28-x86-64-v3-0.28.8-1.1.x86_64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.aarch64",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.ppc64le",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.s390x",
            "openSUSE Tumbleweed:libexiv2-devel-0.28.8-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27631"
    }
  ]
}

CVE-2025-54080 (GCVE-0-2025-54080)

Vulnerability from cvelistv5 – Published: 2025-08-29 14:50 – Updated: 2025-08-29 14:58

Title

Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Summary

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.

Severity ?

1.8 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

URL

Tags

	https://github.com/Exiv2/exiv2/security/advisorie…	x_refsource_CONFIRM
	https://github.com/Exiv2/exiv2/commit/e7373324277…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Exiv2	exiv2	Affected: < 0.28.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-54080",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-29T14:58:11.442776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-29T14:58:23.574Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "exiv2",
          "vendor": "Exiv2",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.28.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 1.8,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-29T14:50:17.623Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/commit/e737332427711f15bcdc4e903203d6b7493eaec0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/commit/e737332427711f15bcdc4e903203d6b7493eaec0"
        }
      ],
      "source": {
        "advisory": "GHSA-496f-x7cq-cq39",
        "discovery": "UNKNOWN"
      },
      "title": "Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-54080",
    "datePublished": "2025-08-29T14:50:17.623Z",
    "dateReserved": "2025-07-16T13:22:18.207Z",
    "dateUpdated": "2025-08-29T14:58:23.574Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-55304 (GCVE-0-2025-55304)

Vulnerability from cvelistv5 – Published: 2025-08-29 15:00 – Updated: 2025-08-29 15:27

Title

Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

Summary

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file. The bug is fixed in version 0.28.6.

Severity ?

1.8 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M

References

URL

Tags

	https://github.com/Exiv2/exiv2/security/advisorie…	x_refsource_CONFIRM
	https://github.com/Exiv2/exiv2/issues/3333	x_refsource_MISC
	https://github.com/Exiv2/exiv2/pull/3335	x_refsource_MISC
	https://github.com/Exiv2/exiv2/pull/3345	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Exiv2	exiv2	Affected: < 0.28.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-55304",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-29T15:26:15.679554Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-29T15:27:17.130Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "exiv2",
          "vendor": "Exiv2",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.28.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file. The bug is fixed in version 0.28.6."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 1.8,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-29T15:00:05.975Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-m54q-mm9w-fp6g",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-m54q-mm9w-fp6g"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/issues/3333",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/issues/3333"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/pull/3335",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/pull/3335"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/pull/3345",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/pull/3345"
        }
      ],
      "source": {
        "advisory": "GHSA-m54q-mm9w-fp6g",
        "discovery": "UNKNOWN"
      },
      "title": "Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-55304",
    "datePublished": "2025-08-29T15:00:05.975Z",
    "dateReserved": "2025-08-12T16:15:30.238Z",
    "dateUpdated": "2025-08-29T15:27:17.130Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-25884 (GCVE-0-2026-25884)

Vulnerability from cvelistv5 – Published: 2026-03-02 19:41 – Updated: 2026-03-02 20:15

Title

Exiv2: Out-of-bounds read in CrwMap::decode0x0805

Summary

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8.

Severity ?

2.7 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M

References

URL

Tags

	https://github.com/Exiv2/exiv2/security/advisorie…	x_refsource_CONFIRM
	https://github.com/Exiv2/exiv2/pull/3462	x_refsource_MISC
	https://github.com/Exiv2/exiv2/commit/cbba4d20651…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Exiv2	exiv2	Affected: < 0.28.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25884",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T20:15:01.199664Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T20:15:22.706Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "exiv2",
          "vendor": "Exiv2",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.28.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-02T19:41:21.157Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/pull/3462",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/pull/3462"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/commit/cbba4d206512fe63e12d164fdd1881562f072a9d",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/commit/cbba4d206512fe63e12d164fdd1881562f072a9d"
        }
      ],
      "source": {
        "advisory": "GHSA-9mxq-4j5g-5wrp",
        "discovery": "UNKNOWN"
      },
      "title": "Exiv2: Out-of-bounds read in CrwMap::decode0x0805"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25884",
    "datePublished": "2026-03-02T19:41:21.157Z",
    "dateReserved": "2026-02-06T21:08:39.129Z",
    "dateUpdated": "2026-03-02T20:15:22.706Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-26623 (GCVE-0-2025-26623)

Vulnerability from cvelistv5 – Published: 2025-02-18 19:24 – Updated: 2025-02-19 15:15

Title

Use After Free in Exiv2

Summary

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `fixiso`. The bug is fixed in version v0.28.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Severity ?

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CWE

CWE-416 - Use After Free

Assigner

GitHub_M

References

URL

Tags

	https://github.com/Exiv2/exiv2/security/advisorie…	x_refsource_CONFIRM
	https://github.com/Exiv2/exiv2/issues/3168	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Exiv2	exiv2	Affected: >= 0.28.0, < 0.28.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-26623",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-19T14:53:08.072267Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-19T15:15:44.716Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "exiv2",
          "vendor": "Exiv2",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.28.0, \u003c 0.28.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `fixiso`. The bug is fixed in version v0.28.5. Users are advised to upgrade. There are no known workarounds for this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-18T19:24:31.701Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38h4-fx85-qcx7",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38h4-fx85-qcx7"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/issues/3168",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/issues/3168"
        }
      ],
      "source": {
        "advisory": "GHSA-38h4-fx85-qcx7",
        "discovery": "UNKNOWN"
      },
      "title": "Use After Free in Exiv2"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-26623",
    "datePublished": "2025-02-18T19:24:31.701Z",
    "dateReserved": "2025-02-12T14:51:02.719Z",
    "dateUpdated": "2025-02-19T15:15:44.716Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-27631 (GCVE-0-2026-27631)

Vulnerability from cvelistv5 – Published: 2026-03-02 19:40 – Updated: 2026-03-02 20:28

Title

Exiv2: Uncaught exception - cannot create std::vector larger than max_size()

Summary

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.

Severity ?

2.7 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

CWE

CWE-248 - Uncaught Exception

Assigner

GitHub_M

References

URL

Tags

	https://github.com/Exiv2/exiv2/security/advisorie…	x_refsource_CONFIRM
	https://github.com/Exiv2/exiv2/issues/3513	x_refsource_MISC
	https://github.com/Exiv2/exiv2/pull/3514	x_refsource_MISC
	https://github.com/Exiv2/exiv2/commit/659db316eef…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Exiv2	exiv2	Affected: < 0.28.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-27631",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T20:27:04.449308Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T20:28:01.516Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "exiv2",
          "vendor": "Exiv2",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.28.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-02T19:40:45.351Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-p2pw-7935-c73j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-p2pw-7935-c73j"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/issues/3513",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/issues/3513"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/pull/3514",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/pull/3514"
        },
        {
          "name": "https://github.com/Exiv2/exiv2/commit/659db316eef745899a778a1e0b760a971d1b69df",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Exiv2/exiv2/commit/659db316eef745899a778a1e0b760a971d1b69df"
        }
      ],
      "source": {
        "advisory": "GHSA-p2pw-7935-c73j",
        "discovery": "UNKNOWN"
      },
      "title": "Exiv2: Uncaught exception - cannot create std::vector larger than max_size()"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-27631",
    "datePublished": "2026-03-02T19:40:45.351Z",
    "dateReserved": "2026-02-20T22:02:30.028Z",
    "dateUpdated": "2026-03-02T20:28:01.516Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

OPENSUSE-SU-2026:10298-1

CVE-2025-54080 (GCVE-0-2025-54080)

CVE-2025-55304 (GCVE-0-2025-55304)

CVE-2026-25884 (GCVE-0-2026-25884)

CVE-2025-26623 (GCVE-0-2025-26623)

CVE-2026-27631 (GCVE-0-2026-27631)

Tags

Sightings

Nomenclature