CVE-2026-53496Published
ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-53496 · Microsoft / collected KEV context
cve-program · CVE-2026-53496
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-g77h-45rf-hcx4
- https://github.com/mattiasw/ExifReader/commit/00878ca9df0e26480dda7a931c888048c9f7be45
- https://github.com/mattiasw/ExifReader/releases/tag/v4.40.1
euvd · EUVD-2026-77628
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-g77h-45rf-hcx4
- https://github.com/mattiasw/ExifReader/commit/00878ca9df0e26480dda7a931c888048c9f7be45
- https://github.com/mattiasw/ExifReader/releases/tag/v4.40.1
nvd · CVE-2026-53496
- https://github.com/mattiasw/ExifReader/commit/00878ca9df0e26480dda7a931c888048c9f7be45
- https://github.com/mattiasw/ExifReader/releases/tag/v4.40.1
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-g77h-45rf-hcx4
osv · GHSA-g77h-45rf-hcx4
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.