CVE-2026-40386
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak i...
Original description
The description as published by the source.
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-40386 libexif Fixed in: 0.6.22-3+deb11u1
- Ubuntu UBUNTU-CVE-2026-40386 libexif
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com