Known vulnerabilities in Exiv2 0.27 rc2

Vendor: GNU
Software: Exiv2
Version: 0.27 rc2
Software CPE: cpe:2.3:a:gnu:exiv2:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Exiv2 version 0.27 rc2 Exiv2 0.27 rc2 is affected by 6 vulnerabilities: 5 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114675 - Incorrect Calculation
CVE-2025-55304
CWE-682 Low
No
No
0.28.6 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 11 more
#VU114674 - Out-of-bounds read
CVE-2025-54080
CWE-125 Medium
No
No
0.28.6 02.09.2025 SB2025090241
SB2025090246
SB2025090247
and 12 more
#VU106252 - Uncontrolled Recursion
CVE-2020-18898
CWE-674 Medium
No
No
- 29.03.2025 SB2021082039
SB20220615151
SB20220615152
and 2 more
#VU69650 - Out-of-bounds read
CVE-2021-37620
CWE-125 Medium
No
No
0.27.5 rc1 28.11.2022 SB2021080919
SB2022112854
SB2022011199
and 7 more
#VU69649 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-34334
CWE-835 Medium
No
No
0.27.5 rc1 28.11.2022 SB2021080919
SB2022112854
SB2023122237
and 8 more
#VU69648 - Reachable Assertion
CVE-2021-32815
CWE-617 Medium
No
No
0.27.5 rc1 28.11.2022 SB2021080919
SB2022112854
SB2022113031
and 8 more