CVE Tools
Track your stack

EXIV2-AUTHORS

49 CVEs tracked since 2017. Since Jul 2017, none of them reached CISA KEV.

EXIV2-AUTHORS CVEs per month

Jul 2017 to Oct 2022. Point at a month, or focus the strip and use the arrow keys.
EXIV2-AUTHORS CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2017-0720
2017-08null or fewer
2017-0930
2017-10null or fewer
2017-11null or fewer
2017-1220
2018-01null or fewer
2018-02null or fewer
2018-0320
2018-04null or fewer
2018-05null or fewer
2018-0620
2018-07null or fewer
2018-08null or fewer
2018-0920
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-0730
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-0470
2021-0520
2021-06null or fewer
2021-0720
2021-08160
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-1060

Products

The products that kept showing up in EXIV2-AUTHORS's monthly top three, with their CVEs summed over those months.

  1. EXIV24912 months

Latest CVEs

The 15 most recently published vulnerabilities affecting EXIV2-AUTHORS.

  1. CVE-2025-55304Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata5.5
  2. CVE-2025-54080Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file5.5
  3. CVE-2025-26623Use After Free in Exiv29.8
  4. CVE-2023-44398Out-of-bounds write in exiv28.8
  5. CVE-2020-18831Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.7.8
  6. CVE-2020-18773An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.6.5
  7. CVE-2020-18771Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.8.1
  8. CVE-2020-18774A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.6.5
  9. CVE-2020-18898A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.6.5
  10. CVE-2020-18899An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.6.5
  11. CVE-2021-37615Null pointer dereference in Exiv2::Internal::resolveLens0x3194.7
  12. CVE-2021-37619Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header4.7
  13. CVE-2021-37618Out-of-bounds read in Exiv2::Jp2Image::printStructure4.7
  14. CVE-2021-37616Null pointer dereference in Exiv2::Internal::resolveLens0x8ff5.5
  15. CVE-2021-37623Denial of service due to infinite loop in JpegBase::printStructure (#2)5.5

The record

Peak rank
#43 in Aug 2021
Busiest month shown
Aug 2021, 16 CVEs
Months with a KEV entry
0 since Jul 2017
Monthly snapshots
12 since 2017
EXIV2-AUTHORS's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store