Known vulnerabilities in exiv2
Vendor:
Fedoraproject
Software:
exiv2
Software CPE:
cpe:2.3:o:fedoraproject:exiv2:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
25
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (25)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123480 - Out-of-bounds read CVE-2026-25884 |
CWE-125 | Low | 0.28.9-1.fc43, 0.28.9-1.fc45 | 03.03.2026 |
SB2026030345 SB2026030912 SB2026031536 and 11 more |
||
| #VU123479 - Out-of-bounds read CVE-2026-27596 |
CWE-125 | Low | 0.28.9-1.fc43, 0.28.9-1.fc45 | 03.03.2026 |
SB2026030345 SB2026030912 SB2026031152 and 11 more |
||
| #VU123478 - Integer overflow CVE-2026-27631 |
CWE-190 | Low | 0.28.9-1.fc43, 0.28.9-1.fc45 | 03.03.2026 |
SB2026030345 SB2026030912 SB2026031536 and 11 more |
||
| #VU114675 - Incorrect Calculation CVE-2025-55304 |
CWE-682 | Low | 0.28.6-1.fc41, 0.28.6-1.fc42, 0.28.6-1.fc43, 0.28.6-2.fc41, 0.28.6-2.fc42, 0.28.6-2.fc43 | 02.09.2025 |
SB2025090241 SB2025090246 SB2025090247 and 11 more |
||
| #VU114674 - Out-of-bounds read CVE-2025-54080 |
CWE-125 | Medium | 0.28.6-1.fc41, 0.28.6-1.fc42, 0.28.6-1.fc43, 0.28.6-2.fc41, 0.28.6-2.fc42, 0.28.6-2.fc43 | 02.09.2025 |
SB2025090241 SB2025090246 SB2025090247 and 12 more |
||
| #VU104047 - Use After Free CVE-2025-26623 |
CWE-416 | High | 0.28.5-1.fc43 | 18.02.2025 |
SB2025021851 SB20250228110 SB20250228111 and 2 more |
||
| #VU84712 - Out-of-bounds read CVE-2021-29470 |
CWE-125 | Medium | 0.27.3-6.fc33, 0.27.3-6.fc34 | 22.12.2023 |
SB2022060401 SB2023122237 SB2021051505 and 8 more |
||
| #VU84709 - Out-of-bounds read CVE-2021-29458 |
CWE-125 | Medium | 0.27.3-6.fc33, 0.27.3-6.fc34 | 22.12.2023 |
SB2022060401 SB2023122237 SB2021051505 and 6 more |
||
| #VU67973 - Resource exhaustion CVE-2021-32617 |
CWE-400 | Medium | 0.27.3-7.fc33, 0.27.3-7.fc34 | 06.10.2022 |
SB2021051706 SB2022100648 SB2023122237 and 9 more |
||
| #VU55921 - CVE-2021-29473 |
Low | 0.27.3-6.fc33, 0.27.3-6.fc34 | 17.08.2021 |
SB2021051706 SB2021081715 SB2022112854 and 12 more |
|||
| #VU55920 - CVE-2021-29457 |
Medium | 0.27.3-6.fc33, 0.27.3-6.fc34 | 17.08.2021 |
SB2021051706 SB2021081715 SB2022112854 and 9 more |
|||
| #VU55919 - CVE-2021-3482 |
High | 0.27.3-6.fc33, 0.27.3-6.fc34 | 17.08.2021 |
SB2021051706 SB2021081715 SB2021051505 and 6 more |
|||
| #VU53298 - Exposure of sensitive information to an unauthorized actor CVE-2021-29623 |
CWE-200 | Low | 0.27.3-7.fc33, 0.27.3-7.fc34 | 17.05.2021 |
SB2021051706 SB2023122237 SB2021060740 and 8 more |
||
| #VU20309 - NULL Pointer Dereference CVE-2019-13114 |
CWE-476 | Low | 0.27.2-1.fc30 | 19.08.2019 |
SB2019081904 SB2019081376 SB2019073120 |
||
| #VU20308 - Reachable Assertion CVE-2019-13113 |
CWE-617 | Low | 0.27.2-1.fc30 | 19.08.2019 |
SB2019081904 SB2019081375 SB2019073120 |
||
| #VU20307 - Resource Management Errors CVE-2019-13112 |
CWE-399 | Low | 0.27.2-1.fc30 | 19.08.2019 |
SB2019081904 SB2019081384 SB2022112854 and 1 more |
||
| #VU20306 - Integer overflow CVE-2019-13111 |
CWE-190 | Low | 0.27.2-1.fc30 | 19.08.2019 |
SB2019081904 SB2019081383 SB20200611166 and 2 more |
||
| #VU20305 - Integer overflow CVE-2019-13110 |
CWE-190 | Low | 0.27.2-1.fc30 | 19.08.2019 |
SB2019081904 SB2019081382 SB2022113031 and 2 more |
||
| #VU19510 - Integer overflow CVE-2019-13109 |
CWE-190 | Low | 0.27.2-1.fc30 | 28.07.2019 |
SB2019081904 SB2019081381 SB2022113031 and 3 more |
||
| #VU19509 - Integer overflow CVE-2019-13108 |
CWE-190 | Low | 0.27.2-1.fc30 | 28.07.2019 |
SB2019081904 SB2019081380 SB2021120730 and 3 more |
Showing elements 1 - 20 out of 25