Mattiasw

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 4
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-85715

    ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

    Last Modified: Sep 17, 2026
    Published: Sep 17, 2026

    CVE-2026-53496

    ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

    Last Modified: Sep 15, 2026
    Published: Sep 14, 2026

    CVE-2026-8814

    Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containing a highly compressed zTXt chunk can cause ExifReader to materialize a disproportionately large Comment value in memory.

    Last Modified: May 19, 2026
    Published: May 19, 2026

    CVE-2026-8813

    This affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together with a zero record size. During parsing, ExifReader repeatedly processes the same record and appends entries to an array without sufficient bounds validation, causing excessive memory growth. In applications that parse attacker-supplied images, this may lead to denial of service through memory exhaustion.

    Last Modified: May 19, 2026
    Published: May 19, 2026
    Items Per Page