Known vulnerabilities in Exiv2

Vendor: GNU
Software: Exiv2
Software CPE: cpe:2.3:a:gnu:exiv2:*:*:*:*:*:*:*:*
Total vulnerabilities: 108
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Exiv2 Exiv2 is affected by 108 known vulnerabilities: 6 high, 65 medium, 37 low Critical High Medium Low

Vulnerabilities (108)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146334 - Stack-based buffer overflow
CWE-121 Medium
No
No
0.28.9 31.08.2026 SB2026083131
#VU146333 - Out-of-bounds read
CVE-2026-49275
CWE-125 Medium
No
No
0.28.9 31.08.2026 SB2026083131
#VU146332 - Improper input validation
CWE-20 Low
No
No
0.28.9 31.08.2026 SB2026083131
#VU146331 - Out-of-bounds read
CVE-2026-68547
CWE-125 Medium
No
No
0.28.9 31.08.2026 SB2026083131
#VU146330 - Out-of-bounds write
CVE-2026-68546
CWE-787 Medium
No
No
0.28.9 31.08.2026 SB2026083131
#VU146329 - Out-of-bounds write
CWE-787 Medium
No
No
0.28.9 31.08.2026 SB2026083131
#VU146328 - Out-of-bounds write
CWE-787 Medium
No
No
0.28.9 31.08.2026 SB2026083131
#VU123480 - Out-of-bounds read
CVE-2026-25884
CWE-125 Low
No
No
0.28.8 03.03.2026 SB2026030345
SB2026030912
SB2026031536
and 11 more
#VU123479 - Out-of-bounds read
CVE-2026-27596
CWE-125 Low
No
No
0.28.8 03.03.2026 SB2026030345
SB2026030912
SB2026031152
and 11 more
#VU123478 - Integer overflow
CVE-2026-27631
CWE-190 Low
No
No
0.28.8 03.03.2026 SB2026030345
SB2026030912
SB2026031536
and 11 more
#VU114675 - Incorrect Calculation
CVE-2025-55304
CWE-682 Low
No
No
0.28.6 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 11 more
#VU114674 - Out-of-bounds read
CVE-2025-54080
CWE-125 Medium
No
No
0.28.6 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 12 more
#VU104047 - Use After Free
CVE-2025-26623
CWE-416 High
No
No
0.28.5 18.02.2025 SB2025021851
SB20250228110
SB20250228111
and 2 more
#VU93855 - Out-of-bounds read
CVE-2024-39695
CWE-125 Low
No
No
0.28.3 08.07.2024 SB2024070820
SB2024072125
SB2026030912
#VU86373 - Out-of-bounds read
CVE-2024-24826
CWE-125 Low
No
No
- 13.02.2024 SB2024021314
#VU86372 - Uncontrolled Recursion
CVE-2024-25112
CWE-674 Low
No
No
- 13.02.2024 SB2024021314
#VU84712 - Out-of-bounds read
CVE-2021-29470
CWE-125 Medium
No
No
0.27.4 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 8 more
#VU84708 - Allocation of Resources Without Limits or Throttling
CVE-2020-18899
CWE-770 Medium
No
No
0.27.1 22.12.2023 SB2022092056
SB2023122237
SB2026033123
and 1 more
#VU84705 - Out-of-bounds read
CVE-2020-18771
CWE-125 Medium
No
No
0.27.1 22.12.2023 SB2022092056
SB2023122237
SB2026033123
and 1 more
#VU82730 - Out-of-bounds write
CVE-2023-44398
CWE-787 High
No
No
0.28.1 06.11.2023 SB2023110620
SB2023122237


Showing elements 1 - 20 out of 108