CVE-2026-38332
LOW
NVD
CVSS Score
2.9
Severity
LOW
Published
Sep 13, 2026
Vendor
unknown
Description
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.