CVE-2026-38332
Heap Buffer Over-read in TinyEXIF Leading to Information Disclosure
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.
CVSS 3.1 · 2.9 Low
EPSS < 1%
KEV · Not listed
Vendors
Products