The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44871.json"