CVE-2026-53496
1 advisory.
npm/exifreader CVE-2026-53496: medium 5.3
ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
Action: Upgrade exifreader to 4.40.1 or later.
npm i exifreader@4.40.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.40.1 | - |
Fixed versions
| 4.40.1 |
Sources
- osv: GHSA-g77h-45rf-hcx4
- https://github.com/mattiasw/ExifReader/security/advisories/GHSA-g77h-45rf-hcx4
- https://github.com/mattiasw/ExifReader
- https://github.com/mattiasw/ExifReader/releases/tag/v4.40.1
CVE-2026-53496 · published · modified · JSON