CVE-2026-85715

ExifReader prior to 4.41.1 contains a denial-of-service vulnerability in the parsing of HEIC/AVIF ISO-BMFF files within getItems() in src/image-header-iso-bmff-iloc.js. The parser trusts itemCount and extentCount values from the iloc box; when offsetSize, lengthSize, baseOffsetSize, and indexSize...

CVE-2026-85715 ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEIC or AVIF ISO-BMFF files in getItems within src/image-header-iso-bmff-iloc.js and trusts iloc itemCount and extentCount values while allocating an extent object for every nested-loop...