Threats tagged 'ghsa-5vpc-p5mg-f7rm'

TinyEXIF versions before 1.1.0 contain a heap-based buffer over-read vulnerability in the EntryParser::Fetch methods triggered by a crafted SubjectArea length. This flaw is identified as CWE-125 and can cause a denial of service due to application crash or instability. The vulnerability has a low CVSS score of 2.9 and does not impact confidentiality or integrity.