FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2026-03-03 16:31:49 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
340dc4c1-895a-11f0-b6e5-4ccc6adda413	exiv2 -- Denial-of-service Kevin Backhouse reports: A denial-of-service was found in Exiv2 version v0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file. Discovery 2025-08-29 Entry 2025-09-04 exiv2 < 0.28.6 CVE-2025-55304 https://github.com/Exiv2/exiv2/security/advisories/GHSA-m54q-mm9w-fp6g

VuXML ID

Description

340dc4c1-895a-11f0-b6e5-4ccc6adda413

exiv2 -- Denial-of-service

Kevin Backhouse reports:

A denial-of-service was found in Exiv2 version v0.28.5: a quadratic algorithm in the ICC profile parsing code in jpegBase::readMetadata() can cause Exiv2 to run for a long time. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The denial-of-service is triggered when Exiv2 is used to read the metadata of a crafted jpg image file.

Discovery 2025-08-29
Entry 2025-09-04
exiv2

< 0.28.6

CVE-2025-55304
https://github.com/Exiv2/exiv2/security/advisories/GHSA-m54q-mm9w-fp6g