The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade exiv2 | Aug 22, 2024 | Jul 8, 2024 |
| Freebsd | — | Upgrade exiv2 | Sep 8, 2024 | Sep 7, 2024 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Mar 10, 2026 | Mar 9, 2026 |
| Suse | — | Upgrade libexiv2-28Upgrade libexiv2-28-x86-64-v3 | Dec 5, 2025 | Dec 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub