CVE-2026-25884 - Vulnerability Analysis

Overview

Exiv2 < 0.28.8 contains an out-of-bounds read caused by improper bounds checking in the CRW image parser, letting attackers potentially read memory out of bounds, exploit requires crafted image file.

Severity & Score

Impact

Attackers can read out-of-bounds memory, potentially leading to information disclosure or application crash.

Mitigation

Update to version 0.28.8 or later.

References

• https://github.com/Exiv2/exiv2/commit/cbba4d206512fe63e12d164fdd1881562f072a9d
• https://github.com/Exiv2/exiv2/pull/3462
• https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner