Known vulnerabilities in exiv2 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:exiv2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exiv2 (Ubuntu package) exiv2 (Ubuntu package) is affected by 28 known vulnerabilities: 1 high, 11 medium, 16 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123480 - Out-of-bounds read
CVE-2026-25884
CWE-125 Low
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 03.03.2026 SB2026030345
SB2026030912
SB2026031536
and 11 more
#VU123479 - Out-of-bounds read
CVE-2026-27596
CWE-125 Low
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 03.03.2026 SB2026030345
SB2026030912
SB2026031152
and 11 more
#VU123478 - Integer overflow
CVE-2026-27631
CWE-190 Low
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 03.03.2026 SB2026030345
SB2026030912
SB2026031536
and 11 more
#VU114675 - Incorrect Calculation
CVE-2025-55304
CWE-682 Low
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 11 more
#VU114674 - Out-of-bounds read
CVE-2025-54080
CWE-125 Medium
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 12 more
#VU84711 - Out-of-bounds write
CVE-2021-29464
CWE-787 High
No
No
0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 6 more
#VU84710 - Out-of-bounds read
CVE-2021-29463
CWE-125 Medium
No
No
0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 7 more
#VU84708 - Allocation of Resources Without Limits or Throttling
CVE-2020-18899
CWE-770 Medium
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 22.12.2023 SB2022092056
SB2023122237
SB2026033123
and 1 more
#VU84705 - Out-of-bounds read
CVE-2020-18771
CWE-125 Medium
No
No
0.25-2.1ubuntu16.04.7+esm5, 0.25-3.1ubuntu0.18.04.11+esm1, 0.27.2-8ubuntu2.7+esm1, 0.27.2-8ubuntu2.7+esm3, 0.27.5-3ubuntu1.1, 0.27.5-3ubuntu1.3, 0.27.6-1ubuntu0.1, 0.27.6-1ubuntu0.3, 0.28.5+dfsg-1ubuntu0.1, 0.28.5+dfsg-1ubuntu0.3 22.12.2023 SB2022092056
SB2023122237
SB2026033123
and 1 more
#VU69650 - Out-of-bounds read
CVE-2021-37620
CWE-125 Medium
No
No
0.27.2-8ubuntu2.7, 0.27.3-3ubuntu1.6, 0.27.3-3ubuntu4.1 28.11.2022 SB2021080919
SB2022112854
SB2022011199
and 7 more
#VU67973 - Resource exhaustion
CVE-2021-32617
CWE-400 Medium
No
No
0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 06.10.2022 SB2021051706
SB2022100648
SB2023122237
and 9 more
#VU55921 -
CVE-2021-29473
Low
No
No
0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 17.08.2021 SB2021051706
SB2021081715
SB2022112854
and 12 more
#VU53298 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29623
CWE-200 Low
No
No
0.25-3.1ubuntu0.18.04.9, 0.27.2-8ubuntu2.4, 0.27.2-8ubuntu2.7, 0.27.3-3ubuntu0.4, 0.27.3-3ubuntu1.3 17.05.2021 SB2021051706
SB2023122237
SB2021060740
and 8 more
#VU36440 - Integer overflow
CVE-2018-19107
CWE-190 Medium
No
No
0.25-2.1ubuntu16.04.4, 0.25-3.1ubuntu0.18.04.3, 0.25-4ubuntu0.2, 0.25-4ubuntu1.1 08.11.2018 SB2018110829
SB2019071528
#VU13578 - Out-of-bounds read
CVE-2018-12265
CWE-190 Low
No
No
0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 05.07.2018 SB2018070502
SB2018070503
SB2018102309
and 2 more
#VU13577 - Integer overflow
CVE-2018-12264
CWE-125 Low
No
No
0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 05.07.2018 SB2018070502
SB2018070503
SB2018102309
and 2 more
#VU13576 - Heap-based Buffer Overflow
CVE-2018-11531
CWE-122 Low
No
No
0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 05.07.2018 SB2018070502
SB2018070503
SB2018112607
and 3 more
#VU13575 - Permissions, Privileges, and Access Controls
CVE-2018-10998
CWE-264 Low
No
No
0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 05.07.2018 SB2018070502
SB2018070503
SB2018112607
and 1 more
#VU13574 - Memory corruption
CVE-2018-10958
CWE-119 Low
No
No
0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 05.07.2018 SB2018070502
SB2018070503
SB2018112607
and 1 more
#VU13573 - Buffer over-read
CVE-2018-10999
CWE-126 Low
No
No
0.23-1ubuntu2.1, 0.25-2.1ubuntu16.04.2, 0.25-3.1ubuntu0.17.10.1, 0.25-3.1ubuntu0.18.04.1 04.07.2018 SB2018070502
SB2018070503
SB2018112607
and 1 more


Showing elements 1 - 20 out of 28