Threats affecting pkg:github/cdcseacave/TinyEXIF

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.9	EPSS 0.2%	CVE-2026-38332cdcseacave TinyEXIF · Out-of-bounds Read Low2.9EPSS 0.2%2026-09-13CVE Database V5CVE-2026-38332 TinyEXIF versions before 1.1.0 contain a heap-based buffer over-read vulnerability in the EntryParser::Fetch methods triggered by a crafted SubjectArea length. This flaw is identified as CWE-125 and can cause a denial of service due to application crash or instability. The vulnerability has a low CVSS score of 2.9 and does not impact confidentiality or integrity. EPSS 0.2%Vulnerability CWE-125 #ghsa-5vpc-p5mg-f7rm	CVE Database V5	2026-09-13

Page 1 of 1