CVE-2026-27596

A flaw was found in Exiv2, a C++ library and command-line utility for managing image metadata. An out-of-bounds read vulnerability exists within the preview component. This flaw can be triggered when an attacker processes a specially crafted image file using Exiv2 with a specific command-line argument, such as '-pp'. Successful exploitation of this vulnerability typically leads to a denial of service (DoS) due to the application crashing.

This is a LOW impact flaw in Exiv2. The vulnerability in the preview component is only triggered when the exiv2 utility is executed with the -pp command-line argument.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.