Security Advisory

CVE-2026-25884

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-02 19:41:21

Last updated 2026-03-02 20:15:22

Assigner GitHub_M

CVSS score 2.7

State PUBLISHED

Description

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8.

← Browse all CVEs View on cve.org ↗