GHSA-pj96-35fp-cfccPublished
ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-85715 · Microsoft / collected KEV context
cve-program · CVE-2026-85715
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-pj96-35fp-cfcc
- https://github.com/mattiasw/ExifReader/commit/17b901cd192d2c90d7f9f347bd3073b28b482699
- https://github.com/mattiasw/ExifReader/releases/tag/v4.41.1
euvd · EUVD-2026-81897
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-pj96-35fp-cfcc
- https://github.com/mattiasw/ExifReader/commit/17b901cd192d2c90d7f9f347bd3073b28b482699
- https://github.com/mattiasw/ExifReader/releases/tag/v4.41.1
nvd · CVE-2026-85715
- https://github.com/mattiasw/ExifReader/commit/17b901cd192d2c90d7f9f347bd3073b28b482699
- https://github.com/mattiasw/ExifReader/releases/tag/v4.41.1
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-pj96-35fp-cfcc
osv · GHSA-pj96-35fp-cfcc
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.