Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra command line argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-592e4238fa advisory.

    Update to exiv2-0.28.8.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5eb6f779c0 advisory.

    Update to exiv2-0.28.8.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1480 advisory.

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the     CRW image parser. This issue has been patched in version 0.28.8. (CVE-2026-25884)

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability     is in the preview component, which is only triggered when running Exiv2 with an extra command line     argument, like -pp. The out-of-bounds read is at a 4GB offset, which usually causes Exiv2 to crash. This     issue has been patched in version 0.28.8. (CVE-2026-27596)

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability     is in the preview component, which is only triggered when running Exiv2 with an extra command line     argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which     causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
    (CVE-2026-27631)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20410-1 advisory.

    Update to exiv2 0.28.8:

    - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870).
    - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntriesDecoder     (bsc#1219871).
    - CVE-2024-39695: out-of-bounds read in AsfVideo: streamProperties (bsc#1227528).
    - CVE-2025-26623: heap buffer overflow via writing metadata into a crafted image file (bsc#1237347).
    - CVE-2025-54080: out-of-bounds read in `Exiv2: EpsImage: writeMetadata()` when writing metadata into a     crafted image       file (bsc#1248962).
    - CVE-2025-55304: quadratic performance algorithm in the ICC profile parsing code of `JpegBase:
    readMetadata`       (bsc#1248963).
    - CVE-2026-25884: out-of-bounds read in `CrwMap: decode0x0805` (bsc#1259083).
    - CVE-2026-27596: integer overflow in `LoaderNative: getData()` leads to out-of-bounds read (bsc#1259084).
    - CVE-2026-27631: crash due to uncaught exception when trying to create `std: vector` larger than     `max_size()`       (bsc#1259085).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3201 advisory.

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the     CRW image parser. This issue has been patched in version 0.28.8. (CVE-2026-25884)

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability     is in the preview component, which is only triggered when running Exiv2 with an extra command line     argument, like -pp. The out-of-bounds read is at a 4GB offset, which usually causes Exiv2 to crash. This     issue has been patched in version 0.28.8. (CVE-2026-27596)

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability     is in the preview component, which is only triggered when running Exiv2 with an extra command line     argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which     causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
    (CVE-2026-27631)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8103-1 advisory.

    It was discovered that Exiv2 did not correctly handle reading certain buffers. An attacker could possibly     use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04     LTS. (CVE-2020-18771)

    Wen Cheng discovered that Exiv2 did not correctly handle certain memory allocation. If a user or system     were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a     denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-18899)

    It was discovered that Exiv2 did not correctly handle writing certain metadata. If a user or system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial     of service. (CVE-2025-54080)

    It was discovered that Exiv2 did not correctly handle parsing certain metadata. If a user or system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial     of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu     25.10. (CVE-2025-55304)

    It was discovered that Exiv2 did not correctly handle parsing certain images. If a user or system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial     of service. (CVE-2026-25884)

    It was discovered that Exiv2 did not correctly handle previewing certain images. An attacker could     possibly use this issue to cause a denial of service. (CVE-2026-27596)

    It was discovered that Exiv2 did not correctly handle certain integer arithmetic. An attacker could     possibly use this issue to cause a denial of service. (CVE-2026-27631)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202603-01 (Exiv2: Multiple Vulnerabilities)

    The following vulnerabilities have been discovered in Exiv2: 2 out of bounds reads, an integer overflow,     and an uncaught exception. The worst of which can lead to a Denial of Service via a crash of the program.
    Please review the CVE identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Exiv2 installed on the remote host is 0.28.7. It is, therefore, affected by multiple vulnerabilities:

  - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC     image metadata. In version 0.28.7, an out-of-bounds read was found. The vulnerability is in the CRW image     parser. (CVE-2026-25884)

  - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC     image metadata. In version 0.28.7, an out-of-bounds read was found in Exiv2. The vulnerability is in     the preview component, which is only triggered when running Exiv2 with an extra command line argument,     like -pp. The out-of-bounds read is at a 4GB offset, which usually causes Exiv2 to crash. (CVE-2026-27596)

  - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC     image metadata. In version 0.28.7, an uncaught exception was found in Exiv2. The vulnerability is in     the preview component, which is only triggered when running Exiv2 with an extra command line argument,     like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which causes Exiv2     to crash with an uncaught exception. (CVE-2026-27631)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability     is in the preview component, which is only triggered when running Exiv2 with an extra command line     argument, like -pp. Due to an integer overflow, the code attempts to create a huge std::vector, which     causes Exiv2 to crash with an uncaught exception. This issue has been patched in version 0.28.8.
    (CVE-2026-27631)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
306050	Fedora 42 : mingw-exiv2 (2026-592e4238fa)	Nessus	Fedora Local Security Checks	medium
306048	Fedora 43 : mingw-exiv2 (2026-5eb6f779c0)	Nessus	Fedora Local Security Checks	medium
304280	Amazon Linux 2023 : exiv2, exiv2-devel, exiv2-libs (ALAS2023-2026-1480)	Nessus	Amazon Linux Local Security Checks	medium
304230	openSUSE 16 Security Update : exiv2 (openSUSE-SU-2026:20410-1)	Nessus	SuSE Local Security Checks	medium
303087	Amazon Linux 2 : exiv2, --advisory ALAS2-2026-3201 (ALAS-2026-3201)	Nessus	Amazon Linux Local Security Checks	medium
303030	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Exiv2 vulnerabilities (USN-8103-1)	Nessus	Ubuntu Local Security Checks	medium
301499	GLSA-202603-01 : Exiv2: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
301135	Exiv2 0.28.7 Multiple Vulnerabilities	Nessus	Misc.	medium
300392	Linux Distros Unpatched Vulnerability : CVE-2026-27631	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-27631

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium