Resource exhaustion in Bep Imagemeta
CVE-2025-32024
bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The EXIF data format allows for defining excessively large data structures in relatively small payloads. Before v0.10.0, If…
EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.
Affected products
- Bep Imagemeta — versions < 0.10.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)