PatchTheCVE: exiv2https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-27631: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC imhttps://patchthecve.com/cve/CVE-2026-27631.htmlhttps://patchthecve.com/cve/CVE-2026-27631.htmlWed, 17 Jun 2026 10:27:25 +0000MEDIUM 5.3: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra commaCVE-2026-27596: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC imhttps://patchthecve.com/cve/CVE-2026-27596.htmlhttps://patchthecve.com/cve/CVE-2026-27596.htmlWed, 17 Jun 2026 10:27:21 +0000HIGH 7.5: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra commaCVE-2026-25884: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC imhttps://patchthecve.com/cve/CVE-2026-25884.htmlhttps://patchthecve.com/cve/CVE-2026-25884.htmlWed, 17 Jun 2026 10:25:22 +0000HIGH 8.1: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8.CVE-2025-55304: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC imhttps://patchthecve.com/cve/CVE-2025-55304.htmlhttps://patchthecve.com/cve/CVE-2025-55304.htmlMon, 19 Oct 2026 17:10:00 +0000MEDIUM 5.5: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time.CVE-2025-54080: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC imhttps://patchthecve.com/cve/CVE-2025-54080.htmlhttps://patchthecve.com/cve/CVE-2025-54080.htmlMon, 19 Oct 2026 17:10:00 +0000MEDIUM 5.5: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attCVE-2025-26623: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC imhttps://patchthecve.com/cve/CVE-2025-26623.htmlhttps://patchthecve.com/cve/CVE-2025-26623.htmlWed, 17 Jun 2026 09:02:09 +0000CRITICAL 9.8: Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected. Exiv2 is a command-line utility and C++CVE-2024-39695: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of https://patchthecve.com/cve/CVE-2024-39695.htmlhttps://patchthecve.com/cve/CVE-2024-39695.htmlWed, 17 Jun 2026 07:42:29 +0000MEDIUM 5.3: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read