Resource exhaustion in Bep Imagemeta

CVE-2025-32025

bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead…

EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.