Beveiligingsadvies

CVE-2026-8814

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-19 05:00:09

Laatst bijgewerkt 2026-05-19 13:11:48

Toegewezen door snyk

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containing a highly compressed zTXt chunk can cause ExifReader to materialize a disproportionately large Comment value in memory.

← Alle CVE's bekijken Bekijk op cve.org ↗