Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata

TRUNG BÌNH 5.5CVE-2025-55304 · GHSA-m54q-mm9w-fp6g · PYSEC-2026-1355 · Công bố 29/08/2025 · cập nhật 19/10/2026

Tóm tắt nhanh

CVE-2025-55304 là lỗ hổng mức TRUNG BÌNH (CVSS 5.5) ảnh hưởng exiv2, exiv2 (exiv2).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.25%, cao hơn 16.9% các lỗ hổng khác.
Cách xử lý: cập nhật lên 0.28.6 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
exiv2 PyPI	`≤ 0.17.3`	Chưa có bản vá
exiv2 exiv2	`< 0.28.6`	`0.28.6`

Mô tả

Impact

A denial-of-service was found in Exiv2 version v0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file.

Patches

The bug is fixed in version v0.28.6.

References

Issue: https://github.com/Exiv2/exiv2/issues/3333 Fixes: https://github.com/Exiv2/exiv2/pull/3335 (main branch), https://github.com/Exiv2/exiv2/pull/3345 (0.28.x branch)

For more information

Please see our security policy for information about Exiv2 security.

Mô tả của NVD

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file. The bug is fixed in version 0.28.6.