Known vulnerabilities in exiv2 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
exiv2 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:exiv2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
28
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
0.21-0ubuntu1
0.21-0ubuntu2
0.21.1-0ubuntu1
0.21.1-0ubuntu2
0.19-3
0.18-1ubuntu1
0.17-1ubuntu1
0.16-3ubuntu1.1
0.16-3ubuntu1
0.15-1ubuntu1
0.15-1ubuntu2.1
0.15-1ubuntu2
0.12-0ubuntu2.1
0.12-0ubuntu2
0.10-1ubuntu1
0.10-1.2ubuntu1
0.12-0ubuntu2~edgy1
0.10-1.3ubuntu1
0.7-9.1
0.7-9.1ubuntu1
0.28.7+dfsg-1
0.28.7+dfsg-2
0.28.8+dfsg-1
0.27.2-8ubuntu2.7+esm3
0.27.5-3ubuntu1.3
0.27.6-1ubuntu0.3
0.28.5+dfsg-1ubuntu0.3
0.25-2.1ubuntu16.04.7+esm5
0.25-3.1ubuntu0.18.04.11+esm1
0.27.2-8ubuntu2.7+esm1
0.27.5-3ubuntu1.1
0.27.6-1ubuntu0.1
0.28.5+dfsg-1ubuntu0.1
0.28.4+dfsg-2
0.28.4+dfsg-1
0.28.0+dfsg-1
0.28.0+dfsg-2
0.28.0+dfsg-3
0.28.0+dfsg-4
0.28.1+dfsg-1
0.28.1+dfsg-2
0.28.1+dfsg-3
0.28.2+dfsg-1
0.28.3+dfsg-1
0.28.3+dfsg-2
0.27.6-1
0.27.5-4
0.27.5-2
0.27.5-3
0.27.5-1
0.27.5-1ubuntu1
0.27.3-3ubuntu1.5
0.27.3-3ubuntu1.4
0.27.3-3ubuntu1.1
0.27.3-3ubuntu0.2
0.27.3-1
0.27.3-2
0.27.3-3
0.27.3-3ubuntu1
0.27.3-3ubuntu2
0.27.3-3ubuntu3
0.27.3-3ubuntu4
0.27.3-3+deb11u1
0.27.3-3.1
0.27.3-3.1ubuntu1
0.27.2-8ubuntu2.6
0.27.2-8ubuntu2.5
0.27.2-8ubuntu2.2
0.28.5+dfsg-1
0.27.6-1build1
0.27.5-3ubuntu1
0.27.2-8ubuntu2.7
0.27.3-3ubuntu1.6
0.27.3-3ubuntu4.1
0.27.2-8ubuntu2.4
0.27.3-3ubuntu0.4
0.27.3-3ubuntu1.3
0.25-3.1ubuntu0.18.04.11
0.25-3.1ubuntu0.18.04.10
0.25-3.1ubuntu0.18.04.9
0.25-3.1ubuntu0.18.04.7
0.27.2
0.25
0.23
0.22
0.27.2-8ubuntu2
0.27.2-8build1
0.25-3.1ubuntu0.18.04.5
0.26-1
0.27.2-1
0.27.2-2
0.27.2-3
0.27.2-4
0.27.2-5
0.27.2-6
0.27.2-7
0.27.2-8
0.27.2-8ubuntu1
0.25-4ubuntu3
0.25-4ubuntu2.2
0.25-2.1ubuntu16.04.6
0.25-4ubuntu2.1
0.25-4ubuntu1.2
0.25-3.1ubuntu0.18.04.4
0.25-2.1ubuntu16.04.5
0.25-4ubuntu2
0.25-3.1ubuntu0.18.04.3
0.25-4ubuntu1.1
0.25-4ubuntu0.2
0.25-2.1ubuntu16.04.4
0.25-4ubuntu1
0.25-4ubuntu0.1
0.25-3.1ubuntu0.18.04.2
0.25-2.1ubuntu16.04.3
0.23-1ubuntu2.2
0.25-4
0.25-3.1ubuntu0.18.04.1
0.25-3.1ubuntu0.17.10.1
0.25-2.1ubuntu16.04.2
0.24-4.1ubuntu1~gcc5
0.18~pre2-1
0.23-1ubuntu1
0.23-1ubuntu2
0.23-1ubuntu2.1
0.25-3
0.25-3.1
0.25-2.1ubuntu16.04.1
0.25-2
0.25-2.1
0.25-1ubuntu1
0.25-1
0.24-4ubuntu1
0.23-1.1
0.24-3
0.24-4
0.24-4.1
0.6.2-1
0.7-1
0.7-2
0.7-3
0.7-4
0.7-5
0.7-6
0.7-7
0.7-8
0.7-9
0.7-10
0.9-1
0.9.1-1
0.10-1
0.10-1.1
0.10-1.2
0.10-1.3
0.12-0.1
0.12-0.2
0.10-1.4
0.12-1
0.14-1
0.14-2
0.15-1
0.15-2
0.16-1
0.16-2
0.16-3
0.16-4
0.17-1
0.17.1-1
0.18-1
0.18.1-1
0.18.2-1
0.19-1
0.20-1
0.20-2
0.21-1
0.21.1-1
0.20-2.1
0.22-1
0.22-2
0.23-1
0.24-1
0.24-2
0.24-2ubuntu1
0.24-2ubuntu1.1
Vulnerabilities (28)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123480 - Out-of-bounds read CVE-2026-25884 |
CWE-125 | Low | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 03.03.2026 |
SB2026030345 SB2026030912 SB2026031536 and 11 more |
||
| #VU123479 - Out-of-bounds read CVE-2026-27596 |
CWE-125 | Low | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 03.03.2026 |
SB2026030345 SB2026030912 SB2026031152 and 11 more |
||
| #VU123478 - Integer overflow CVE-2026-27631 |
CWE-190 | Low | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 03.03.2026 |
SB2026030345 SB2026030912 SB2026031536 and 11 more |
||
| #VU114675 - Incorrect Calculation CVE-2025-55304 |
CWE-682 | Low | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 02.09.2025 |
SB2025090241 SB2025090246 SB2025090247 and 11 more |
||
| #VU114674 - Out-of-bounds read CVE-2025-54080 |
CWE-125 | Medium | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 02.09.2025 |
SB2025090241 SB2025090246 SB2025090247 and 12 more |
||
| #VU84711 - Out-of-bounds write CVE-2021-29464 |
CWE-787 | High | 0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 | 22.12.2023 |
SB2022060401 SB2023122237 SB2021051505 and 6 more |
||
| #VU84710 - Out-of-bounds read CVE-2021-29463 |
CWE-125 | Medium | 0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 | 22.12.2023 |
SB2022060401 SB2023122237 SB2021051505 and 7 more |
||
| #VU84708 - Allocation of Resources Without Limits or Throttling CVE-2020-18899 |
CWE-770 | Medium | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 22.12.2023 |
SB2022092056 SB2023122237 SB2026033123 and 1 more |
||
| #VU84705 - Out-of-bounds read CVE-2020-18771 |
CWE-125 | Medium | 0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 | 22.12.2023 |
SB2022092056 SB2023122237 SB2026033123 and 1 more |
||
| #VU69650 - Out-of-bounds read CVE-2021-37620 |
CWE-125 | Medium | 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu1.6, 0.27.3-3ubuntu4.1 | 28.11.2022 |
SB2021080919 SB2022112854 SB2022011199 and 7 more |
||
| #VU67973 - Resource exhaustion CVE-2021-32617 |
CWE-400 | Medium | 0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 | 06.10.2022 |
SB2021051706 SB2022100648 SB2023122237 and 9 more |
||
| #VU55921 - CVE-2021-29473 |
Low | 0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 | 17.08.2021 |
SB2021051706 SB2021081715 SB2022112854 and 12 more |
|||
| #VU53298 - Exposure of sensitive information to an unauthorized actor CVE-2021-29623 |
CWE-200 | Low | 0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 | 17.05.2021 |
SB2021051706 SB2023122237 SB2021060740 and 8 more |
||
| #VU36440 - Integer overflow CVE-2018-19107 |
CWE-190 | Medium | 0.25-2.1ubuntu16.04.4, 0.25-3.1ubuntu0.18.04.3, 0.25-4ubuntu0.2, 0.25-4ubuntu1.1 | 08.11.2018 |
SB2018110829 SB2019071528 |
||
| #VU13578 - Out-of-bounds read CVE-2018-12265 |
CWE-190 | Low | 0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 | 05.07.2018 |
SB2018070502 SB2018070503 SB2018102309 and 2 more |
||
| #VU13577 - Integer overflow CVE-2018-12264 |
CWE-125 | Low | 0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 | 05.07.2018 |
SB2018070502 SB2018070503 SB2018102309 and 2 more |
||
| #VU13576 - Heap-based Buffer Overflow CVE-2018-11531 |
CWE-122 | Low | 0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 | 05.07.2018 |
SB2018070502 SB2018070503 SB2018112607 and 3 more |
||
| #VU13575 - Permissions, Privileges, and Access Controls CVE-2018-10998 |
CWE-264 | Low | 0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 | 05.07.2018 |
SB2018070502 SB2018070503 SB2018112607 and 1 more |
||
| #VU13574 - Memory corruption CVE-2018-10958 |
CWE-119 | Low | 0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 | 05.07.2018 |
SB2018070502 SB2018070503 SB2018112607 and 1 more |
||
| #VU13573 - Buffer over-read CVE-2018-10999 |
CWE-126 | Low | 0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 | 04.07.2018 |
SB2018070502 SB2018070503 SB2018112607 and 1 more |
Showing elements 1 - 20 out of 28