PT-2025-7218 · Exiv2+1 · Exiv2+1

Marsman1996

·

Published

2025-02-16

·

Updated

2026-03-23

·

CVE-2025-26623

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.28.0 through v0.28.4
Description: A heap buffer overflow was found in Exiv2 when used to write metadata into a crafted image file. This issue can be exploited by an attacker to gain code execution if they can trick the victim into running Exiv2 on a crafted image file. The heap overflow is triggered by a less frequently used Exiv2 operation, which is writing the metadata. For example, to trigger the bug in the Exiv2 command-line application, an extra command-line argument such as fixiso is needed.
Recommendations: For Exiv2 versions v0.28.0 through v0.28.4, update to version v0.28.5 to resolve the issue. As a temporary workaround, consider avoiding the use of Exiv2 for writing metadata until the issue is resolved. Restrict access to crafted image files to minimize the risk of exploitation. Avoid using Exiv2 with untrusted image files until the issue is resolved. At the moment, there are no other known workarounds for this vulnerability.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025:7457
ALT-PU-2025-3353
AZL-56946
AZL-57071
BDU:2025-02013
CVE-2025-26623
GHSA-38H4-FX85-QCX7
OESA-2025-1197
OESA-2025-1198
OPENSUSE-SU-2026:10298-1
OPENSUSE-SU-2026:20410-1
RHSA-2025:7457
SUSE-SU-2026:20923-1

Affected Products

Alt Linux
Exiv2