CVE-2026-8813

This affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together with a zero record size. During parsing, ExifReader repeatedly processes the same record and appends entries to an array without sufficient bounds validation, causing excessive memory growth. In applications that parse attacker-supplied images, this may lead to denial of service through memory exhaustion.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/yuki-matsuhashi/3243ea38e5fbf8cfe19b624f04c9f4b4
https://github.com/mattiasw/ExifReader/commit/c9d88b67e127b2dcc7b46e328df468257fb2dc30
https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335
https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335

Configurations

No configuration.

History

23 Jul 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Esto afecta a las versiones del paquete exifreader anteriores a la 4.39.0. Una imagen manipulada que contiene una etiqueta ICC mluc puede establecer un recuento de registros controlado por el atacante junto con un tamaño de registro cero. Durante el análisis, ExifReader procesa repetidamente el mismo registro y añade entradas a un array sin suficiente validación de límites, causando un crecimiento excesivo de la memoria. En aplicaciones que analizan imágenes suministradas por el atacante, esto puede llevar a la denegación de servicio por agotamiento de la memoria.

19 May 2026, 14:16

Type	Values Removed	Values Added
References	~~() https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335 -~~	() https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335 -

19 May 2026, 07:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-19 07:16

Updated : 2026-07-23 20:10

NVD link : CVE-2026-8813

Mitre link : CVE-2026-8813

CVE.ORG link : CVE-2026-8813

JSON object : View

Products Affected

No product.

CWE

CWE-1284

Improper Validation of Specified Quantity in Input

{"id": "CVE-2026-8813", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8813", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-19T13:07:11.775744Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "report@snyk.io", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "report@snyk.io", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "report@snyk.io", "affectedData": [{"vendor": "n/a", "product": "exifreader", "versions": [{"status": "affected", "version": "0", "lessThan": "4.39.0", "versionType": "semver"}]}]}], "published": "2026-05-19T07:16:30.193", "references": [{"url": "https://gist.github.com/yuki-matsuhashi/3243ea38e5fbf8cfe19b624f04c9f4b4", "source": "report@snyk.io"}, {"url": "https://github.com/mattiasw/ExifReader/commit/c9d88b67e127b2dcc7b46e328df468257fb2dc30", "source": "report@snyk.io"}, {"url": "https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335", "source": "report@snyk.io"}, {"url": "https://security.snyk.io/vuln/SNYK-JS-EXIFREADER-16689335", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "report@snyk.io", "description": [{"lang": "en", "value": "CWE-1284"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "This affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together with a zero record size. During parsing, ExifReader repeatedly processes the same record and appends entries to an array without sufficient bounds validation, causing excessive memory growth. In applications that parse attacker-supplied images, this may lead to denial of service through memory exhaustion."}, {"lang": "es", "value": "Esto afecta a las versiones del paquete exifreader anteriores a la 4.39.0. Una imagen manipulada que contiene una etiqueta ICC mluc puede establecer un recuento de registros controlado por el atacante junto con un tama\u00f1o de registro cero. Durante el an\u00e1lisis, ExifReader procesa repetidamente el mismo registro y a\u00f1ade entradas a un array sin suficiente validaci\u00f3n de l\u00edmites, causando un crecimiento excesivo de la memoria. En aplicaciones que analizan im\u00e1genes suministradas por el atacante, esto puede llevar a la denegaci\u00f3n de servicio por agotamiento de la memoria."}], "lastModified": "2026-07-23T20:10:00.130", "sourceIdentifier": "report@snyk.io"}