Skip to content
Threat Feed
Subscribe

Product

Exifreader (<= 4.41.0)

1 brief RSS
low advisory

ExifReader Denial of Service via Crafted HEIC/AVIF Files

ExifReader version 4.41.0 is susceptible to a heap exhaustion denial-of-service vulnerability due to an unbounded object allocation loop when parsing malicious ISO-BMFF iloc box structures.

exifreader denial-of-service vulnerability memory-exhaustion
1t 1c