TinyEXIF vulnerabilities

CVEs whose affected-version data names the TinyEXIF package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-38332Low· 2.9

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.

▾ Sunlitcdcseacave · TinyEXIFEPSS 0.12%via NVD

TinyEXIF vulnerabilities (CVEs) · VulnSea