Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20410-1 advisory.

    Update to exiv2 0.28.8:

    - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870).
    - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntriesDecoder     (bsc#1219871).
    - CVE-2024-39695: out-of-bounds read in AsfVideo: streamProperties (bsc#1227528).
    - CVE-2025-26623: heap buffer overflow via writing metadata into a crafted image file (bsc#1237347).
    - CVE-2025-54080: out-of-bounds read in `Exiv2: EpsImage: writeMetadata()` when writing metadata into a     crafted image       file (bsc#1248962).
    - CVE-2025-55304: quadratic performance algorithm in the ICC profile parsing code of `JpegBase:
    readMetadata`       (bsc#1248963).
    - CVE-2026-25884: out-of-bounds read in `CrwMap: decode0x0805` (bsc#1259083).
    - CVE-2026-27596: integer overflow in `LoaderNative: getData()` leads to out-of-bounds read (bsc#1259084).
    - CVE-2026-27631: crash due to uncaught exception when trying to create `std: vector` larger than     `max_size()`       (bsc#1259085).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202603-01 (Exiv2: Multiple Vulnerabilities)

    The following vulnerabilities have been discovered in Exiv2: 2 out of bounds reads, an integer overflow,     and an uncaught exception. The worst of which can lead to a Denial of Service via a crash of the program.
    Please review the CVE identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of exiv2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39695 advisory.

  - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata     of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the     parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered     when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.
    (CVE-2024-39695)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0274 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-39695:
    Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata     of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the     parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered     when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3e44c35f-6cf4-11ef-b813-4ccc6adda413 advisory.

    Kevin Backhouse reports:
    An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability                is in the parser for the ASF video format, which was a new feature in v0.28.0,                so Exiv2 versions before v0.28 are not affected. The out-of-bounds read is                triggered when Exiv2 is used to read the metadata of a crafted video file.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Exiv2 installed on the remote host is prior to 0.28.3. It is, therefore, affected by a vulnerability as referenced in the GHSA-38rv-8x93-pvrh advisory.

  - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata     of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the     parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered     when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.
    (CVE-2024-39695)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libexiv2 installed on the remote host is prior to 0.28.3. It is, therefore, affected by a vulnerability as referenced in the GHSA-38rv-8x93-pvrh advisory.

  - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata     of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the     parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered     when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.
    (CVE-2024-39695)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
304230	openSUSE 16 Security Update : exiv2 (openSUSE-SU-2026:20410-1)	Nessus	SuSE Local Security Checks	medium
301499	GLSA-202603-01 : Exiv2: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
295493	Azure Linux 3.0 Security Update: exiv2 (CVE-2024-39695)	Nessus	Azure Linux Local Security Checks	medium
276427	TencentOS Server 4: exiv2 (TSSA-2024:0274)	Nessus	Tencent Local Security Checks	medium
206769	FreeBSD : exiv2 -- Out-of-bounds read in AsfVideo::streamProperties (3e44c35f-6cf4-11ef-b813-4ccc6adda413)	Nessus	FreeBSD Local Security Checks	medium
204910	Exiv2 0.28.x < 0.28.3 (GHSA-38rv-8x93-pvrh)	Nessus	Misc.	medium
204909	libexiv2 0.28.x < 0.28.3 (GHSA-38rv-8x93-pvrh)	Nessus	Misc.	medium

Detections

Analytics

CVE-2024-39695

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium