CVE-2026-25884 | exiv2 up to 0.28.7 CrwMap::decode0x0805 out-of-bounds

A vulnerability marked as problematic has been reported in exiv2 up to 0.28.7. Affected by this vulnerability is the function CrwMap::decode0x0805. Performing a manipulation results in out-of-bounds read.

This vulnerability was named CVE-2026-25884. The attack needs to be approached locally. There is no available exploit.

It is suggested to upgrade the affected component.