CVE-2025-71329 image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

🗓️ 10 Jun 2026 13:04:30Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Denial of service in image-size 2.0.2 from an infinite loop in JPEG XL and High Efficiency image format parsers due to a zero size box.

Reporter	Title	Published	Views	Family All 13
cnnvd	image-size 资源管理错误漏洞	10 Jun 202600:00	–	cnnvd
cve	CVE-2025-71329	10 Jun 202613:04	–	cve
cvelist	CVE-2025-71329 image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser	10 Jun 202613:04	–	cvelist
euvd	EUVD-2025-210106	10 Jun 202613:04	–	euvd
nvd	CVE-2025-71329	10 Jun 202614:16	–	nvd
ptsecurity	PT-2026-48403	10 Jun 202600:00	–	ptsecurity
redhatcve	CVE-2025-71329	15 Jun 202614:36	–	redhatcve
snyk	Infinite loop	10 Jun 202614:38	–	snyk
snyk	Infinite loop	10 Jun 202614:38	–	snyk
susecve	SUSE CVE-2025-71329	13 Jun 202602:30	–	susecve

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71329.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-71329
vulncheck	www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-jxl-heif-parser
web	www.web.archive.org/web/20260224152152/https://github.com/image-size/image-size/pull/439
github	www.github.com/image-size/image-size
joshua	www.joshua.hu/image-size-infinite-loop-dos-vulnerabilities

16 Jul 2026 03:31Current

6.2Medium risk

Vulners AI Score6.2

CVSS 48.7

EPSS0.0043