We found a serious stability issue while parsing certain EXIF/TIFF metadata.
When the library parses EXIF MakerNote (tag 37500), an invalid / out-of-range offset may be treated as a valid address and used for further pr…...safely From a semantic point of view, MakerNote is vendor-private...