AZL-66767
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66767.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-66767
- Upstream
- Published
- 2025-08-29T15:15:35Z
- Modified
- 2026-04-01T05:21:03.576386Z
- Summary
- CVE-2025-55304 affecting package exiv2 0.28.0-1
- Details
-
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file. The bug is fixed in version 0.28.6.
- References