Skip to content
OpenAdvisories

Package · Alpine

exiv2

40 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Out-of-bounds write in exiv2

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, s…