Skip to content
OpenAdvisories
Medium RHSA-2025:7457 1 CVE

Red Hat Security Advisory: exiv2 security update

Published May 14, 2025 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2 0:0.28.3-3.el10_0.2
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2-debuginfo 0:0.28.3-3.el10_0.2
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2-debugsource 0:0.28.3-3.el10_0.2
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2-devel 0:0.28.3-3.el10_0.2
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2-doc 0:0.28.3-3.el10_0.2
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2-libs 0:0.28.3-3.el10_0.2
Red Hat · RHEL 10 enterprise_linux:10.0 exiv2-libs-debuginfo 0:0.28.3-3.el10_0.2

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-26623

    Use After Free in Exiv2

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected…

    Exiv2 exiv2 exiv2 exiv2 Debian Azure Linux Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2346345
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7457.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-26623
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-26623
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-26623
  • article
    https://github.com/Exiv2/exiv2/issues/3168
  • article
    https://github.com/Exiv2/exiv2/security/advisories/GHSA-38h4-fx85-qcx7