CVE-2026-27631

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.28.8

Description Exiv2 is a C++ library and a command-line utility used to read, write, delete, and modify image metadata (Exif, IPTC, XMP, and ICC). A flaw exists in the preview component where an integer overflow can occur when the utility is run with an extra command-line argument, such as -pp. This overflow leads to an attempt to create an excessively large std::vector, resulting in an uncaught exception and causing Exiv2 to crash.

Recommendations Versions prior to 0.28.8 should be updated to version 0.28.8 or later.