Skip to content
OpenAdvisories

Product · mattiasw

ExifReader

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-53496

    ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

    ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load() and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the ISO-BMFF parser in src/image-header-iso-bmff.js, where findMetaBox() and parse…

    mattiasw ExifReader exifreader npm