Known vulnerabilities in Exiv2

Vendor: GNU
Software: Exiv2
Software CPE: cpe:2.3:a:gnu:exiv2:*:*:*:*:*:*:*:*
Total vulnerabilities: 101
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Exiv2 Exiv2 is affected by 101 known vulnerabilities: 6 high, 59 medium, 36 low Critical High Medium Low

Vulnerabilities (101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123480 - Out-of-bounds read
CVE-2026-25884
CWE-125 Low
No
No
0.28.8 03.03.2026 SB2026030345
SB2026030912
SB2026031536
and 9 more
#VU123479 - Out-of-bounds read
CVE-2026-27596
CWE-125 Low
No
No
0.28.8 03.03.2026 SB2026030345
SB2026030912
SB2026031152
and 9 more
#VU123478 - Integer overflow
CVE-2026-27631
CWE-190 Low
No
No
0.28.8 03.03.2026 SB2026030345
SB2026030912
SB2026031536
and 9 more
#VU114675 - Incorrect Calculation
CVE-2025-55304
CWE-682 Low
No
No
0.28.6 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 11 more
#VU114674 - Out-of-bounds read
CVE-2025-54080
CWE-125 Medium
No
No
0.28.6 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 12 more
#VU104047 - Use After Free
CVE-2025-26623
CWE-416 High
No
No
0.28.5 18.02.2025 SB2025021851
SB20250228110
SB20250228111
and 2 more
#VU93855 - Out-of-bounds read
CVE-2024-39695
CWE-125 Low
No
No
0.28.3 08.07.2024 SB2024070820
SB2024072125
SB2026030912
#VU86373 - Out-of-bounds read
CVE-2024-24826
CWE-125 Low
No
No
- 13.02.2024 SB2024021314
#VU86372 - Uncontrolled Recursion
CVE-2024-25112
CWE-674 Low
No
No
- 13.02.2024 SB2024021314
#VU84720 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37623
CWE-835 Medium
No
No
0.27.5 rc1 22.12.2023 SB2021092125
SB2023122237
SB2021120730
and 5 more
#VU84719 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37622
CWE-835 Medium
No
No
0.27.5 rc1 22.12.2023 SB2021092125
SB2023122237
SB2021120730
and 5 more
#VU84718 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37621
CWE-835 Medium
No
No
0.27.5 rc1 22.12.2023 SB2021092125
SB2023122237
SB2021120730
and 5 more
#VU84717 - Out-of-bounds read
CVE-2021-37619
CWE-125 Medium
No
No
0.27.5 rc1 22.12.2023 SB2021092125
SB2023122237
SB2021120730
and 6 more
#VU84712 - Out-of-bounds read
CVE-2021-29470
CWE-125 Medium
No
No
0.27.4 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 8 more
#VU84711 - Out-of-bounds write
CVE-2021-29464
CWE-787 High
No
No
0.27.4 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 6 more
#VU84710 - Out-of-bounds read
CVE-2021-29463
CWE-125 Medium
No
No
0.27.4 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 7 more
#VU84709 - Out-of-bounds read
CVE-2021-29458
CWE-125 Medium
No
No
0.27.4 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 6 more
#VU84708 - Allocation of Resources Without Limits or Throttling
CVE-2020-18899
CWE-770 Medium
No
No
0.27.1 22.12.2023 SB2022092056
SB2023122237
SB2026033123
and 1 more
#VU84705 - Out-of-bounds read
CVE-2020-18771
CWE-125 Medium
No
No
0.27.1 22.12.2023 SB2022092056
SB2023122237
SB2026033123
and 1 more
#VU82730 - Out-of-bounds write
CVE-2023-44398
CWE-787 High
No
No
0.28.1 06.11.2023 SB2023110620
SB2023122237


Showing elements 1 - 20 out of 101