https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:17:28 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:3152 <p><strong>Affected:</strong> AlmaLinux:8: exiv2-devel, AlmaLinux:8: exiv2-doc</p> <p>Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.</p> <p>Security Fix(es):</p> <p>* exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: exiv2-devel, AlmaLinux:8: exiv2-doc</p> <p>Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.</p> <p>Security Fix(es):</p> <p>* exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:3152 https://cve.radiocsirt.org/vuln/cleanstart-2024-wk46975 <p><strong>Affected:</strong> CleanStart: exiv2</p> <p>Security vulnerability affects the exiv2 package. Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.</p> <p><strong>Affected:</strong> CleanStart: exiv2</p> <p>Security vulnerability affects the exiv2 package. Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-wk46975 https://cve.radiocsirt.org/vuln/cnvd-2021-62190 cnvd-2021-62190 https://cve.radiocsirt.org/vuln/cnvd-2021-62190 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31291 <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31291 https://cve.radiocsirt.org/vuln/ghsa-f74q-rm7p-mwq5 <p>A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) via crafted metadata.</p> <p>A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) via crafted metadata.</p> https://cve.radiocsirt.org/vuln/ghsa-f74q-rm7p-mwq5 https://cve.radiocsirt.org/vuln/gsd-2021-31291 gsd-2021-31291 https://cve.radiocsirt.org/vuln/gsd-2021-31291 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12381-1 <p>exiv2-0.27.5-3.1 on GA media</p> <p>exiv2-0.27.5-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12381-1 https://cve.radiocsirt.org/vuln/rhsa-2021:3230 <p>exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp</p> <p>exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3230 https://cve.radiocsirt.org/vuln/suse-su-2022:3543-1 <p>Security update for exiv2</p> <p>Security update for exiv2</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3543-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31291 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: exiv2, Ubuntu:18.04:LTS: exiv2, Ubuntu:20.04:LTS: exiv2</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: exiv2, Ubuntu:18.04:LTS: exiv2, Ubuntu:20.04:LTS: exiv2</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-31291 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1640 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente exiv2 ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente exiv2 ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1640