The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The read of uninitialized memory is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to leak a few bytes of stack memory, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.4.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade exiv2-docUpgrade exiv2Upgrade exiv2-develUpgrade exiv2-libs | May 4, 2022 | May 13, 2021 |
| Alpine Linux | — | Upgrade exiv2 | Aug 22, 2024 | May 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 13, 2021 |
| Centos_linux | — | Upgrade exiv2-debuginfoUpgrade exiv2-libsUpgrade exiv2Upgrade exiv2-libs-debuginfoUpgrade exiv2-debugsource | Nov 10, 2021 | May 13, 2021 |
| Debian | — | Upgrade exiv2 | Jul 30, 2024 | May 13, 2021 |
| Freebsd | — | Upgrade exiv2 | Nov 4, 2022 | Jun 30, 2021 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Dec 27, 2023 | May 13, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade exiv2-libs | Sep 29, 2021 | May 13, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade exiv2Upgrade exiv2-libs | Aug 10, 2021 | May 13, 2021 |
| Redhat_linux | — | Upgrade exiv2-libs-debuginfoNo solution existsUpgrade exiv2-docUpgrade exiv2Upgrade exiv2-debuginfoUpgrade exiv2-debugsourceUpgrade exiv2-develUpgrade exiv2-libs | Nov 10, 2021 | May 13, 2021 |
| Rocky_linux | — | Upgrade exiv2-libsUpgrade exiv2-develUpgrade exiv2-debuginfoUpgrade exiv2-libs-debuginfoUpgrade exiv2-debugsourceUpgrade exiv2 | Mar 12, 2024 | May 13, 2021 |
| Suse | — | Upgrade exiv2-langUpgrade libexiv2-develUpgrade exiv2Upgrade libexiv2-27-32bitUpgrade libexiv2-27Upgrade libexiv2-26Upgrade libexiv2-xmp-staticUpgrade libexiv2-26-32bit | Nov 8, 2022 | May 13, 2021 |
| Ubuntu | — | Upgrade libexiv2-14 (Ubuntu Pro)Upgrade exiv2 (Ubuntu Pro)Upgrade libexiv2-14Upgrade exiv2Upgrade libexiv2-27 | May 26, 2021 | May 13, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub