← All advisories

Low severity2.9OSV Advisory· Published Sep 13, 2026· Updated Sep 22, 2026

CVE-2026-38332

CVE-2026-38332

Description

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Cdcseacave/TinyexifOSV2 versions
1.0.4, 1.0.3, 1.0.2, …+ 1 more
- (no CPE)range: 1.0.4, 1.0.3, 1.0.2, …
- (no CPE)range: <1.1.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.