CVE-2005-4676: Andreas Huggel EXIV2

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata.

Affected products

• Andreas Huggel EXIV2: version 0.3 only; version 0.4 only; version 0.5 only; version 0.6 only; version 0.6.1 only; version 0.6.2 only; …

Published 2005-12-31. Last modified 2026-06-16.