exiv2-libs (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package exiv2-libs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (13)

• CVE-2021-29457 — CVSS 7.8 (high): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer…
• CVE-2021-31292 — CVSS 7.5 (high): An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of…
• CVE-2020-18898 — CVSS 6.5 (medium): A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a…
• CVE-2021-3482 — CVSS 6.5 (medium): A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in…
• CVE-2021-29458 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-37619 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29470 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-32617 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient…
• CVE-2021-37618 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29623 — CVSS 3.6 (low): Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of…
• CVE-2021-29463 — CVSS 3.3 (low): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
• CVE-2021-29464 — CVSS 3.3 (low): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer…
• CVE-2021-29473 — CVSS 2.5 (low): Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An…