ExifReader vulnerabilities

1 known vulnerability in ExifReader from Mattiasw. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ExifReader: Memory Allocation with Excessive Size Value

  CVE-2026-85715Sep 17, 2026Mattiasw

  ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEIC or AVIF ISO-BMFF files in getItems() within src/image-header-iso-bmff-iloc.js and trusts iloc itemCount and extentCount values while allocating an e