CVE-2026-40385
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or informa...
Original description
The description as published by the source.
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-40385 libexif Fixed in: 0.6.22-3+deb11u1
- Ubuntu UBUNTU-CVE-2026-40385 libexif
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com