https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:13:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07704 bdu:2023-07704 https://cve.radiocsirt.org/vuln/bdu:2023-07704 https://cve.radiocsirt.org/vuln/cleanstart-2024-eu98453 <p><strong>Affected:</strong> CleanStart: exiv2</p> <p>Security vulnerability affects the exiv2 package. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.</p> <p><strong>Affected:</strong> CleanStart: exiv2</p> <p>Security vulnerability affects the exiv2 package. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-eu98453 https://cve.radiocsirt.org/vuln/euvd-2026-219348 EUVD-2026-219348 https://cve.radiocsirt.org/vuln/euvd-2026-219348 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44398 <p>Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44398 https://cve.radiocsirt.org/vuln/gsd-2023-44398 gsd-2023-44398 https://cve.radiocsirt.org/vuln/gsd-2023-44398 https://cve.radiocsirt.org/vuln/msrc_cve-2023-44398 msrc_CVE-2023-44398 https://cve.radiocsirt.org/vuln/msrc_cve-2023-44398 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13403-1 <p>exiv2-0.28.1-1.1 on GA media</p> <p>exiv2-0.28.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13403-1 https://cve.radiocsirt.org/vuln/pysec-2023-233 <p><strong>Affected:</strong> PyPI: exiv2</p> <p>Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> PyPI: exiv2</p> <p>Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2023-233