CVE-2025-54080
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Exiv2 versions 0.28.5 and earlier contain an out-of-bounds read when writing metadata into a crafted image file. This can lead to an application crash (denial of service). The bug is fixed in version 0.28.6.
Risk Assessment
An attacker could trick a victim into running Exiv2 on a crafted image, causing a crash and denial of service. The risk mainly concerns metadata write operations, which are less frequently used than reads.
Recommendation
Update Exiv2 to version 0.28.6 or later. Avoid processing untrusted image files in metadata write operations.
Other vulnerabilities in Exiv2
See all- CVE-2017-12955High
There is a heap-based buffer overflow in Exiv2 version 0.26 in basicio.cpp. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.
- CVE-2017-11592High
There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.
- CVE-2017-11591High
There is a floating point exception in the Exiv2::ValueType function in Exiv2 version 0.26 that can lead to a remote denial of service attack via crafted input.
- CVE-2017-11553High
There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service.
- CVE-2017-9953High
Exiv2 version 0.26 has an invalid free in Image::printIFDStructure that leads to a segmentation fault. Crafted input can lead to a remote denial of service attack.
- CVE-2025-55304Medium
A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file.
Original NVD description (English source)
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. The bug is fixed in version 0.28.6.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS