CVE-2026-27631

A flaw was found in Exiv2, a C++ library and command-line utility used for managing image metadata. This vulnerability, an integer overflow, exists within the preview component. When Exiv2 is executed with a specific command-line argument, such as -pp, a malicious input can cause the application to attempt to allocate an extremely large amount of memory. This leads to an uncaught exception, resulting in the application crashing and causing a denial of service.

This LOW impact vulnerability in Exiv2 is triggered only when the command-line utility is executed with the -pp argument, which enables the preview component. Exploitation requires explicit user action and is not a default exposure in Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.