← Back to CVE search

CVE-2026-40386

libexif

Description

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

CVSS 4EPSS 0.13999999999999999%Risk 0.41
View source
Published
2026-04-12 19:16:20
Affected versions
<=0.6.25
Type
Package
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L