Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-25884

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.9%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-25884
  • Exiv2 » Exiv2 » Version: N/A
    cpe:2.3:a:exiv2:exiv2:-
  • Exiv2 » Exiv2 » Version: 0.10
    cpe:2.3:a:exiv2:exiv2:0.10
  • Exiv2 » Exiv2 » Version: 0.11
    cpe:2.3:a:exiv2:exiv2:0.11
  • Exiv2 » Exiv2 » Version: 0.12
    cpe:2.3:a:exiv2:exiv2:0.12
  • Exiv2 » Exiv2 » Version: 0.13
    cpe:2.3:a:exiv2:exiv2:0.13
  • Exiv2 » Exiv2 » Version: 0.14
    cpe:2.3:a:exiv2:exiv2:0.14
  • Exiv2 » Exiv2 » Version: 0.15
    cpe:2.3:a:exiv2:exiv2:0.15
  • Exiv2 » Exiv2 » Version: 0.16
    cpe:2.3:a:exiv2:exiv2:0.16
  • Exiv2 » Exiv2 » Version: 0.17
    cpe:2.3:a:exiv2:exiv2:0.17
  • Exiv2 » Exiv2 » Version: 0.17.1
    cpe:2.3:a:exiv2:exiv2:0.17.1
  • Exiv2 » Exiv2 » Version: 0.18
    cpe:2.3:a:exiv2:exiv2:0.18
  • Exiv2 » Exiv2 » Version: 0.18.1
    cpe:2.3:a:exiv2:exiv2:0.18.1
  • Exiv2 » Exiv2 » Version: 0.18.2
    cpe:2.3:a:exiv2:exiv2:0.18.2
  • Exiv2 » Exiv2 » Version: 0.19
    cpe:2.3:a:exiv2:exiv2:0.19
  • Exiv2 » Exiv2 » Version: 0.20
    cpe:2.3:a:exiv2:exiv2:0.20
  • Exiv2 » Exiv2 » Version: 0.21
    cpe:2.3:a:exiv2:exiv2:0.21
  • Exiv2 » Exiv2 » Version: 0.21.1
    cpe:2.3:a:exiv2:exiv2:0.21.1
  • Exiv2 » Exiv2 » Version: 0.22
    cpe:2.3:a:exiv2:exiv2:0.22
  • Exiv2 » Exiv2 » Version: 0.23
    cpe:2.3:a:exiv2:exiv2:0.23
  • Exiv2 » Exiv2 » Version: 0.24
    cpe:2.3:a:exiv2:exiv2:0.24
  • Exiv2 » Exiv2 » Version: 0.25
    cpe:2.3:a:exiv2:exiv2:0.25
  • Exiv2 » Exiv2 » Version: 0.26
    cpe:2.3:a:exiv2:exiv2:0.26
  • Exiv2 » Exiv2 » Version: 0.27
    cpe:2.3:a:exiv2:exiv2:0.27
  • Exiv2 » Exiv2 » Version: 0.27.1
    cpe:2.3:a:exiv2:exiv2:0.27.1
  • Exiv2 » Exiv2 » Version: 0.27.2
    cpe:2.3:a:exiv2:exiv2:0.27.2
  • Exiv2 » Exiv2 » Version: 0.27.3
    cpe:2.3:a:exiv2:exiv2:0.27.3
  • Exiv2 » Exiv2 » Version: 0.27.4
    cpe:2.3:a:exiv2:exiv2:0.27.4
  • Exiv2 » Exiv2 » Version: 0.27.99.0
    cpe:2.3:a:exiv2:exiv2:0.27.99.0
  • Exiv2 » Exiv2 » Version: 0.28.0
    cpe:2.3:a:exiv2:exiv2:0.28.0
  • Exiv2 » Exiv2 » Version: 0.28.1
    cpe:2.3:a:exiv2:exiv2:0.28.1
  • Exiv2 » Exiv2 » Version: 0.28.2
    cpe:2.3:a:exiv2:exiv2:0.28.2
  • Exiv2 » Exiv2 » Version: 0.28.3
    cpe:2.3:a:exiv2:exiv2:0.28.3
  • Exiv2 » Exiv2 » Version: 0.28.4
    cpe:2.3:a:exiv2:exiv2:0.28.4
  • Exiv2 » Exiv2 » Version: 0.28.5
    cpe:2.3:a:exiv2:exiv2:0.28.5
  • Exiv2 » Exiv2 » Version: 0.28.6
    cpe:2.3:a:exiv2:exiv2:0.28.6
  • Exiv2 » Exiv2 » Version: 0.28.7
    cpe:2.3:a:exiv2:exiv2:0.28.7
  • Exiv2 » Exiv2 » Version: 0.3
    cpe:2.3:a:exiv2:exiv2:0.3
  • Exiv2 » Exiv2 » Version: 0.4
    cpe:2.3:a:exiv2:exiv2:0.4
  • Exiv2 » Exiv2 » Version: 0.5
    cpe:2.3:a:exiv2:exiv2:0.5
  • Exiv2 » Exiv2 » Version: 0.6
    cpe:2.3:a:exiv2:exiv2:0.6
  • Exiv2 » Exiv2 » Version: 0.6.1
    cpe:2.3:a:exiv2:exiv2:0.6.1
  • Exiv2 » Exiv2 » Version: 0.6.2
    cpe:2.3:a:exiv2:exiv2:0.6.2
  • Exiv2 » Exiv2 » Version: 0.7
    cpe:2.3:a:exiv2:exiv2:0.7
  • Exiv2 » Exiv2 » Version: 0.8
    cpe:2.3:a:exiv2:exiv2:0.8
  • Exiv2 » Exiv2 » Version: 0.9
    cpe:2.3:a:exiv2:exiv2:0.9
  • Exiv2 » Exiv2 » Version: 0.9.1
    cpe:2.3:a:exiv2:exiv2:0.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved