Image Size
Approved changes feed: RSS · Atom
cpe:2.3:a:image-size:image-size:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Image Size (325ab1ee-d610-5406-b060-14da2e072e4d) |
|---|---|
| Product | Image Size (14fddbd6-57fb-5162-9fc2-891d191cc687) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/image-size/image-size |
purl2cpe | 2026-06-19 13:12:45.719303 |
pkg:npm/image-size |
purl2cpe | 2026-06-19 13:12:45.719304 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-71330 |
vulnerable | 2026-07-29 00:18:08.244560 |
image-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing
HIGH (7.5)
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes and a zero-valued entry length field to trigger an infinite loop in the ICNS parser, as the offset is never incremented when the entry length field is 0, causing the while loop condition to remain true indefinitely.
Published: 2026-06-10T13:02:04.764Z
Updated: 2026-07-14T22:26:08.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71329 |
vulnerable | 2026-07-29 00:18:08.244396 |
image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
HIGH (7.5)
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by providing a crafted image containing a box with a size of zero, causing the offset to never advance and permanently hanging the application.
Published: 2026-06-10T13:04:30.380Z
Updated: 2026-07-14T22:26:08.074Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71319 |
vulnerable | 2026-07-29 00:18:08.225904 |
image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
HIGH (7.5)
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by providing a crafted image containing a box with a size of zero, causing the offset to never advance and permanently hanging the application.
Published: 2026-06-09T19:57:16.125Z
Updated: 2026-09-03T12:04:33.785Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.