Libexif Project Libexif
3 CVEs affecting Libexif Project Libexif. Latest disclosed: 2026-04-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-32775 | High | 7.4 | 2026-03-16 | libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be over… |
CVE-2026-40386 | Medium | 4.0 | 2026-04-12 | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak informatio… |
CVE-2026-40385 | Medium | 4.0 | 2026-04-12 | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leak… |