CVE-2026-38332

TinyEXIF before 1.1.0 is affected by a heap-based buffer over-read in the EntryParser::Fetch methods, triggered via a crafted SubjectArea length in EXIF data. The vulnerability carries a CVSS 3.1 score of 2.9 (LOW) with a local attack vector, high complexity, no privileges required, and a low ava...

CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

CVE-2026-38332: Out-of-bounds Read

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...