UBUNTU-CVE-2026-68547
[GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files]
PatchFirst · Latest vulnerabilities
Vulnerabilities published for exiv2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 5
[GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files]
[GHSA-3695-mjv8-3r52: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server (WebReady/Curl builds)]
[GHSA-hxph-pv7w-8649: Out of bounds read in CrwMap::decodeBasic]
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
Check your installed stack and versions against the current vulnerability feeds.