Skip to content
OpenAdvisories
Medium DLA-1691-1 5 CVEs

exiv2 - security update

Published Feb 26, 2019 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 exiv2 0.24-4.1+deb8u3

Vulnerabilities 5

  • Medium 6.5

    There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A craft…

  • Unscored —

    CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive fun…

  • Unscored —

    In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from…

  • Unscored —

    In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of servic…

  • Unscored —

    In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (applic…