Known vulnerabilities in Exiv2 0.27 rc2
Vendor:
GNU
Software:
Exiv2
Version:
0.27 rc2
Software CPE:
cpe:2.3:a:gnu:exiv2:*:*:*:*:*:*:*:*
Website:
https://www.gnu.org/
Total vulnerabilities:
13
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
0.28.9
0.28.8
0.28.7
0.28.6
0.28.5
0.28.4
0.28.3
0.28.2
0.27.0
0.28.1
0.27.7
0.28.0
0.27.6
0.27.5 rc3
0.27.5 rc2
0.27.5 rc1
0.27.4 rc3
0.27.4 rc2
0.27.4 rc1
0.27.3 rc2
0.27.3 rc1
0.27.2 rc3
0.27.2 rc2
0.27.2 rc1
0.27.1 rc1
0.27 rc3
0.27 rc2
0.27 rc1
0.23.1
0.22
0.21.1
0.21
0.20
0.19
0.18.2
0.18.1
0.18
0.17.1
0.17
0.15
0.14
0.13
0.12
0.11
0.10
0.9.1
0.9
0.8
0.7
0.6.2
0.6.1
0.6
0.5
0.4
0.3
0.27.5
-
0.27.4
0.24
0.27.3
0.27.2
0.27.1
0.16
0.27
0.23.6.el7
0.23
0.25.3.1
0.25
0.26
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146334 - Stack-based buffer overflow |
CWE-121 | Medium | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU146333 - Out-of-bounds read CVE-2026-49275 |
CWE-125 | Medium | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU146332 - Improper input validation |
CWE-20 | Low | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU146331 - Out-of-bounds read CVE-2026-68547 |
CWE-125 | Medium | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU146330 - Out-of-bounds write CVE-2026-68546 |
CWE-787 | Medium | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU146329 - Out-of-bounds write |
CWE-787 | Medium | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU146328 - Out-of-bounds write |
CWE-787 | Medium | 0.28.9 | 31.08.2026 |
SB2026083131 |
||
| #VU114675 - Incorrect Calculation CVE-2025-55304 |
CWE-682 | Low | 0.28.6 | 02.09.2025 |
SB2025090241 SB2025090246 SB2025090247 and 11 more |
||
| #VU114674 - Out-of-bounds read CVE-2025-54080 |
CWE-125 | Medium | 0.28.6 | 02.09.2025 |
SB2025090241 SB2025090246 SB2025090247 and 12 more |
||
| #VU106252 - Uncontrolled Recursion CVE-2020-18898 |
CWE-674 | Medium | - | 29.03.2025 |
SB2021082039 SB20220615151 SB20220615152 and 2 more |
||
| #VU69650 - Out-of-bounds read CVE-2021-37620 |
CWE-125 | Medium | 0.27.5 rc1 | 28.11.2022 |
SB2021080919 SB2022112854 SB2022011199 and 7 more |
||
| #VU69649 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-34334 |
CWE-835 | Medium | 0.27.5 rc1 | 28.11.2022 |
SB2021080919 SB2022112854 SB2023122237 and 8 more |
||
| #VU69648 - Reachable Assertion CVE-2021-32815 |
CWE-617 | Medium | 0.27.5 rc1 | 28.11.2022 |
SB2021080919 SB2022112854 SB2022113031 and 8 more |