https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:24:37.288570+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07704 bdu:2023-07704 2026-10-04T16:24:37.391046+00:00 bdu:2023-07704 https://cve.radiocsirt.org/vuln/cleanstart-2024-eu98453 CLEANSTART-2024-EU98453 — Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metad… 2026-10-04T16:24:37.391097+00:00

Affected: CleanStart: exiv2

Security vulnerability affects the exiv2 package. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.

 https://cve.radiocsirt.org/vuln/euvd-2026-219348 EUVD-2026-219348 2026-10-04T16:24:37.391143+00:00 EUVD-2026-219348 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44398 fkie_cve-2023-44398 2026-10-04T16:24:37.391164+00:00

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-44398 gsd-2023-44398 2026-10-04T16:24:37.391207+00:00 gsd-2023-44398 https://cve.radiocsirt.org/vuln/msrc_cve-2023-44398 msrc_CVE-2023-44398 — Out-of-bounds write in exiv2 2026-10-04T16:24:37.391244+00:00 msrc_CVE-2023-44398 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13403-1 openSUSE-SU-2024:13403-1 — exiv2-0.28.1-1.1 on GA media 2026-10-04T16:24:37.391273+00:00

exiv2-0.28.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-233 PYSEC-2023-233 2026-10-04T16:24:37.391299+00:00

Affected: PyPI: exiv2

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.