Skip to content
OpenAdvisories

Vendor

image-size

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-71329 Public exploit

    image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

    image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can tr…