CVE-2026-25884

A flaw was found in Exiv2, a C++ library and command-line utility for image metadata. A remote attacker could exploit this out-of-bounds read vulnerability in the CRW image parser by providing a specially crafted CRW image file. This could lead to a denial of service, making the application unavailable.

This LOW impact vulnerability in Exiv2, an image metadata library, involves an out-of-bounds read within its CRW image parser. Exploitation requires processing a specially crafted CRW image file.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.