https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:07:02.846861+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:1577 ALSA-2020:1577 — Moderate: exiv2 security, bug fix, and enhancement update 2026-10-02T17:07:02.861197+00:00

Affected: AlmaLinux:8: exiv2-devel, AlmaLinux:8: exiv2-doc, AlmaLinux:8: gegl, AlmaLinux:8: gnome-color-manager, AlmaLinux:8: libgexiv2, AlmaLinux:8: libgexiv2-devel

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.

The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)

Security Fix(es):

* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)

* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)

* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)

* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)

* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)

* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)

* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)

* exiv2: information leak via a crafted file (CVE-2018-11037)

* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)

* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)

* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)

* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)

* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)

* exiv2…

 https://cve.radiocsirt.org/vuln/cnvd-2018-26707 cnvd-2018-26707 2026-10-02T17:07:02.861319+00:00 cnvd-2018-26707 https://cve.radiocsirt.org/vuln/euvd-2026-69787 EUVD-2026-69787 2026-10-02T17:07:02.861340+00:00 EUVD-2026-69787 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19607 fkie_cve-2018-19607 2026-10-02T17:07:02.861353+00:00

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

 https://cve.radiocsirt.org/vuln/ghsa-xpv8-33xp-mjf2 GHSA-xpv8-33xp-mjf2 2026-10-02T17:07:02.861374+00:00

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

 https://cve.radiocsirt.org/vuln/gsd-2018-19607 gsd-2018-19607 2026-10-02T17:07:02.861388+00:00 gsd-2018-19607 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0482-1 openSUSE-SU-2020:0482-1 — Security update for exiv2 2026-10-02T17:07:02.861398+00:00

Security update for exiv2

 https://cve.radiocsirt.org/vuln/pysec-2018-143 Withdrawn: PYSEC-2018-143 2026-10-02T17:07:02.861419+00:00

Withdrawn by the publisher.

Affected: PyPI: exiv2

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

 https://cve.radiocsirt.org/vuln/suse-su-2020:0921-1 SUSE-SU-2020:0921-1 — Security update for exiv2 2026-10-02T17:07:02.861437+00:00

Security update for exiv2

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517 WID-SEC-W-2022-0517 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-02T17:07:02.861455+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.