Description
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
Published: 2026-04-12
Score: 4 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 12 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
Description In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
First Time appeared Libexif Project
Libexif Project libexif
Weaknesses CWE-191
CPEs cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*
Vendors & Products Libexif Project
Libexif Project libexif
References
Metrics cvssV3_1

{'score': 4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L'}

Subscriptions

Libexif Project Libexif
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-04-12T18:55:21.234Z

Reserved: 2026-04-12T18:19:08.139Z

Link: CVE-2026-40386

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-12T19:16:20.640

Modified: 2026-04-12T19:16:20.640

Link: CVE-2026-40386

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses