An unsigned 32‑bit integer overflow exists in the Nikon MakerNote handling code of libexif versions up to 0.6.25. The overflow allows an adversary to manipulate a size field so that the library reads or writes past its intended bounds, potentially causing a crash or leaking data from memory. This weakness is classified as a numeric overflow (CWE‑190).

All 32‑bit platforms that use libexif 0.6.25 or earlier are affected. Applications on 32‑bit Linux, Windows, or macOS that process JPEG, TIFF, or other images containing Nikon MakerNote metadata are at risk. 64‑bit builds are not impacted.

The CVSS score of 4.0 represents moderate severity, and the vulnerability is exploitable only by local attackers who can supply a crafted image file. Because no EPSS score is available and the issue is not listed in the CISA KEV catalog, it appears to be a low‑probability risk, but it can still cause denial of service or expose sensitive data. The likely attack vector is a local file that is parsed by libexif – this inference is drawn from the description of the vulnerability. Organizations should treat this as a fixable flaw that warrants a prompt update, especially in environments that handle untrusted image files.