https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:17:42.406739+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:3152 ALSA-2021:3152 — Important: exiv2 security update 2026-10-03T05:17:42.424486+00:00

Affected: AlmaLinux:8: exiv2-devel, AlmaLinux:8: exiv2-doc

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.

Security Fix(es):

* exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/cleanstart-2024-wk46975 CLEANSTART-2024-WK46975 — Rejected reason: DO NOT USE THIS CANDIDATE NUMBER 2026-10-03T05:17:42.424568+00:00

Affected: CleanStart: exiv2

Security vulnerability affects the exiv2 package. Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.

 https://cve.radiocsirt.org/vuln/cnvd-2021-62190 cnvd-2021-62190 2026-10-03T05:17:42.424603+00:00 cnvd-2021-62190 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31291 fkie_cve-2021-31291 2026-10-03T05:17:42.424626+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

 https://cve.radiocsirt.org/vuln/ghsa-f74q-rm7p-mwq5 GHSA-f74q-rm7p-mwq5 2026-10-03T05:17:42.424663+00:00

A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) via crafted metadata.

 https://cve.radiocsirt.org/vuln/gsd-2021-31291 gsd-2021-31291 2026-10-03T05:17:42.424698+00:00 gsd-2021-31291 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12381-1 openSUSE-SU-2024:12381-1 — exiv2-0.27.5-3.1 on GA media 2026-10-03T05:17:42.424723+00:00

exiv2-0.27.5-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2021:3230 RHSA-2021:3230 — Red Hat Security Advisory: compat-exiv2-026 security update 2026-10-03T05:17:42.424756+00:00

exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp

 https://cve.radiocsirt.org/vuln/suse-su-2022:3543-1 SUSE-SU-2022:3543-1 — Security update for exiv2 2026-10-03T05:17:42.424815+00:00

Security update for exiv2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31291 UBUNTU-CVE-2021-31291 2026-10-03T05:17:42.424855+00:00

Affected: Ubuntu:Pro:16.04:LTS: exiv2, Ubuntu:18.04:LTS: exiv2, Ubuntu:20.04:LTS: exiv2

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1640 WID-SEC-W-2022-1640 — Red Hat Enterprise Linux (exiv2): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Di… 2026-10-03T05:17:42.424895+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente exiv2 ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.