Is CVE-2026-38332 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-38332?

CVE-2026-38332 has a CVSS v3 severity of LOW (2.9).

Back

Description

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.