Description
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cdcseacave | TinyEXIF | < 1.1.0 | 1.1.0 |
Low · 2.9
CVE-2026-38332
EUVD-2026-77112GHSA-5vpc-p5mg-f7rm
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.
Published Sep 13, 2026 · Updated Sep 14, 2026 · Assigned by mitre