Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:exifreader_project:exifreader:*:*:*:*:*:node.js:*:*

1 brief RSS
low advisory

ExifReader Denial of Service via Crafted HEIC/AVIF Files

ExifReader version 4.41.0 is susceptible to a heap exhaustion denial-of-service vulnerability due to an unbounded object allocation loop when parsing malicious ISO-BMFF iloc box structures.

exifreader denial-of-service vulnerability memory-exhaustion
1t 1c