CVE-2025-71329

🗓️ 10 Jun 2026 13:04:30Reported by VulnCheckType

CVE-2025-71329: image-size 2.0.2 DoS via infinite loop in JXL/HEIF parsers with zero-size box.

Reporter	Title	Published	Views	Family All 13
CNNVD	image-size 资源管理错误漏洞	10 Jun 202600:00	–	cnnvd
Cvelist	CVE-2025-71329 image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser	10 Jun 202613:04	–	cvelist
EUVD	EUVD-2025-210106	10 Jun 202613:04	–	euvd
NVD	CVE-2025-71329	10 Jun 202614:16	–	nvd
OSV	CVE-2025-71329 image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser	10 Jun 202613:04	–	osv
Positive Technologies	PT-2026-48403	10 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-71329	15 Jun 202614:36	–	redhatcve
Snyk	Infinite loop	10 Jun 202614:38	–	snyk
Snyk	Infinite loop	10 Jun 202614:38	–	snyk
SUSE CVE	SUSE CVE-2025-71329	13 Jun 202602:30	–	susecve

NVD

Vulners

CNA

Node

image-size image-sizeRange1.1.0–1.2.1

image-size image-sizeRange2.0.0–2.0.2

[
  {
    "vendor": "image-size",
    "product": "image-size",
    "repo": "https://github.com/image-size/image-size",
    "versions": [
      {
        "status": "affected",
        "version": "1.1.0",
        "lessThanOrEqual": "1.2.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThanOrEqual": "2.0.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/image-size"
  }
]

Source	Link
joshua	www.joshua.hu/image-size-infinite-loop-dos-vulnerabilities
vulncheck	www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-jxl-heif-parser
web	www.web.archive.org/web/20260224152152/https://github.com/image-size/image-size/pull/439

14 Jul 2026 22:26Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

CVSS 48.7

EPSS0.0043

SSVC

CWE-835