CVE-2021-34334

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.5.

• CWE-835
• CWE-835

• https://github.com/Exiv2/exiv2/pull/1766Patch, Third Party Advisory
• https://github.com/Exiv2/exiv2/security/advisories/GHSA-hqjh-hpv8-8r9pPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00004.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYGDELIFFJWKUU7SO3QATCIXCZJERGAC/
• https://security.gentoo.org/glsa/202312-06
• https://github.com/Exiv2/exiv2/pull/1766Patch, Third Party Advisory
• https://github.com/Exiv2/exiv2/security/advisories/GHSA-hqjh-hpv8-8r9pPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00004.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYGDELIFFJWKUU7SO3QATCIXCZJERGAC/
• https://security.gentoo.org/glsa/202312-06

Published

Aug 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34329A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2021-3433Invalid channel map in CONNECT_IND results to Deadlock. Zeph…3.3
• CVE-2021-34330A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2021-34331A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2021-34332A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2021-34333A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2021-34335Exiv2 is a command-line utility and C++ library for reading,…5.5
• CVE-2021-34337An issue was discovered in Mailman Core before 3.3.5. An att…6.3
• CVE-2021-34338Ming 0.4.8 has an out-of-bounds buffer overwrite issue in th…6.5
• CVE-2021-34339Ming 0.4.8 has an out-of-bounds buffer access issue in the f…6.5
• CVE-2021-3434Stack based buffer overflow in le_ecred_conn_req(). Zephyr v…7.8
• CVE-2021-34340Ming 0.4.8 has an out-of-bounds buffer access issue in the f…6.5