{"id":"CVE-2026-40385","aliases":["ALPINE-CVE-2026-40385","ALSA-2026:20929","ALSA-2026:22553","AZL-82685","CLSA-2026-1776768816","CLSA-2026-1776769506","CLSA-2026-1776791358","CLSA-2026-1787305055","CLSA-2026-1792990909","DEBIAN-CVE-2026-40385","EUVD-2026-21732","GHSA-j9xr-5c85-xjhm","JLSEC-2026-151","MGASA-2026-0112","OESA-2026-1987","RHSA-2026:20929","RHSA-2026:22553","RHSA-2026:26190","RHSA-2026:26191","RHSA-2026:26192","RHSA-2026:26224","RHSA-2026:26276","RHSA-2026:26292","RHSA-2026:26567","RLSA-2026:20929","RLSA-2026:22553","ROOT-OS-DEBIAN-12-CVE-2026-40385","SUSE-SU-2026:22324-1","SUSE-SU-2026:2837-1","SUSE-SU-2026:2838-1","UBUNTU-CVE-2026-40385","USN-8531-1","openSUSE-SU-2026:10717-1","openSUSE-SU-2026:21023-1"],"status":"published","title":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could...","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00098,"percentile":0.00747,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-04-12T18:16:30Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"libexif","fixed_in":["0.6.26-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libexif","fixed_in":["0.6.24-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libexif","fixed_in":["0.6.24-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libexif","fixed_in":["0.6.25-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libexif","fixed_in":["0.6.26-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"libexif_jll","fixed_in":["0.6.26+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libexif","fixed_in":["0.6.24-1ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libexif","fixed_in":["0.6.24-1ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libexif","fixed_in":["0.6.25-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libexif-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libexif-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-6.el9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-2.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-2.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libexif-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-2.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libexif-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-4ubuntu0.6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libexif-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-4ubuntu0.6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libexif12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-4ubuntu0.6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-2.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-2.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libexif-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-2.el7_9.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-1+deb12u1"}]}],"versions":["0.6.24-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.25-1+deb13u1"}]}],"versions":["0.6.25-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-1"}]}],"versions":["0.6.25-1","0.6.25-2"]},{"source":"osv","ecosystem":"Julia","package":"libexif_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.26+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.21-28.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-7.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-3.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-3.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-3.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-3.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libexif-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-5.el8_4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-3.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libexif-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-3.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libexif-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-3.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libexif-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-3.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.22-6.el9_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-150000.5.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-150000.5.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.16.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.21-1","0.6.21-1ubuntu1","0.6.21-1ubuntu1+esm1","0.6.21-1ubuntu1+esm2","0.6.21-1ubuntu1+esm5","0.6.21-1ubuntu1+esm6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.21-2","0.6.21-2ubuntu0.1","0.6.21-2ubuntu0.2","0.6.21-2ubuntu0.5","0.6.21-2ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.21-2.1","0.6.21-4","0.6.21-4ubuntu0.1","0.6.21-4ubuntu0.2","0.6.21-4ubuntu0.5","0.6.21-4ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.21-5.1","0.6.21-6","0.6.21-6ubuntu0.1","0.6.21-6ubuntu0.3","0.6.21-6ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-1ubuntu0.22.04.1"}]}],"versions":["0.6.22-3","0.6.22-3build1","0.6.23-1","0.6.24-1","0.6.24-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-1ubuntu0.24.04.1"}]}],"versions":["0.6.24-1build1","0.6.24-1build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.25-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.25-2ubuntu0.1"}]}],"versions":["0.6.25-1","0.6.25-1build1","0.6.25-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-1ubuntu0.22.04.1"}]}],"versions":["0.6.22-3","0.6.22-3build1","0.6.23-1","0.6.24-1","0.6.24-1build1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.24-1ubuntu0.24.04.1"}]}],"versions":["0.6.24-1build1","0.6.24-1build2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.25-2ubuntu0.1"}]}],"versions":["0.6.25-1","0.6.25-1build1","0.6.25-2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libexif","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.26-160000.1.1"}]}],"bundled":3}],"products":[{"vendor":"libexif project","product":"libexif"},{"vendor":"libexif_project","product":"libexif"}],"references":[{"url":"https://github.com/libexif/libexif/commit/93003b93e50b3d259bd2227d8775b73a53c35d58","tags":["Patch","fix","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40385","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-j9xr-5c85-xjhm","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-40385","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40385","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-40386","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457687","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457689","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-20929.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22553","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-22553.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776768816.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776769506.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776791358.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787305055.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40386","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792990909.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40385.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-40385","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0112.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35368","tags":["report"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2026\u0026m=slackware-security.368011","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1987","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457689","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20929.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40385","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-40386","tags":["advisory"]},{"url":"https://github.com/libexif/libexif/commit/dc6eac6e9655d14d0779d99e82d0f5f442d2f34b","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22553.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26190","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26190.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26191","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26191.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26192","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26192.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26224","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26224.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26276","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26276.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26292","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26292.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26567","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26567.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:20929","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:22553","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622324-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259755","tags":["report"]},{"url":"https://bugzilla.suse.com/1262000","tags":["report"]},{"url":"https://bugzilla.suse.com/1262001","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40386","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262837-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262838-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-40385","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8531-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-32775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-40386","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-40385","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T18:16:30.42Z","modified":"2026-04-14T16:33:12.567Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T13:43:11.445168Z"}],"euvd":[{"id":"EUVD-2026-21732","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T18:16:30Z","modified":"2026-04-14T16:33:12Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:24:25.999353Z"}],"ghsa":[{"id":"GHSA-j9xr-5c85-xjhm","title":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could...","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T21:30:18Z","modified":"2026-04-12T21:30:19Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:07:25.53537Z"}],"nvd":[{"id":"CVE-2026-40385","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T19:16:20.48Z","modified":"2026-06-17T10:45:13.78Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:14.37744Z"}],"osv":[{"id":"ALPINE-CVE-2026-40385","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T19:16:20.48Z","modified":"2026-11-03T06:33:02.655713935Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"CVE-2026-40385","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T18:16:30.42Z","modified":"2026-10-28T10:49:43.801871194Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:45:03.424067Z"},{"id":"DEBIAN-CVE-2026-40385","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T19:16:20.48Z","modified":"2026-10-01T03:02:39.315525094Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"JLSEC-2026-151","title":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be...","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-17T15:47:23.992Z","modified":"2026-07-25T18:23:56.658052817Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2026-1987","title":"libexif security update","description":"Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags.\r\n\r\nSecurity Fix(es):\n\nIn libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.(CVE-2026-40385)\n\nIn libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.(CVE-2026-40386)","status":"published","published":"2026-04-17T11:10:59Z","modified":"2026-08-18T01:19:39.319217926Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:20929","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-05-27T10:07:26Z","modified":"2026-07-12T10:10:20Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22553","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-03T10:20:13Z","modified":"2026-07-12T10:10:36Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:26190","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-17T10:08:33Z","modified":"2026-07-12T10:11:03Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26191","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-16T10:06:28Z","modified":"2026-07-12T10:11:04Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26192","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-16T10:06:29Z","modified":"2026-07-12T10:11:04Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26224","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-17T10:08:37Z","modified":"2026-07-12T10:11:05Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26276","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-17T10:08:41Z","modified":"2026-07-12T10:11:06Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26292","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-17T10:08:41Z","modified":"2026-07-12T10:11:06Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26567","title":"Red Hat Security Advisory: libexif security update","status":"published","published":"2026-06-18T10:09:54Z","modified":"2026-07-12T10:11:11Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:20929","title":"Moderate: libexif security update","description":"The libexif packages provide a library for extracting extra information from image files.\n\nSecurity Fix(es):\n\n* libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)\n\n* libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T00:00:29.215827Z","modified":"2026-05-29T00:30:04.783982622Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:22553","title":"Moderate: libexif security update","description":"The libexif packages provide a library for extracting extra information from image files.\n\nSecurity Fix(es):\n\n* libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)\n\n* libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-05T12:03:10.63425Z","modified":"2026-06-05T12:30:04.608020142Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-40385","title":"CVE-2026-40385 in rootio-libexif - Patched by Root","description":"Root has patched CVE-2026-40385 in the rootio-libexif package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-05-12T09:30:12Z","modified":"2026-08-27T14:00:07.867373434Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:32.037361Z"},{"id":"UBUNTU-CVE-2026-40385","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T19:16:00Z","modified":"2026-07-13T20:30:08.698481376Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"ALSA-2026:20929","title":"Moderate: libexif security update","description":"The libexif packages provide a library for extracting extra information from image files.  \n\nSecurity Fix(es):  \n\n  * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)\n  * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-26T00:00:00Z","modified":"2026-10-29T11:02:23.593649826Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:22553","title":"Moderate: libexif security update","description":"The libexif packages provide a library for extracting extra information from image files.  \n\nSecurity Fix(es):  \n\n  * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)\n  * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-02T00:00:00Z","modified":"2026-10-29T11:32:34.012010987Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-82685","title":"CVE-2026-40385 affecting package libexif for versions less than 0.6.24-3","description":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","status":"published","published":"2026-04-12T19:16:20Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.988217Z"},{"id":"CLSA-2026-1776768816","title":"libexif: Fix of 3 CVEs","description":"- CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote\n  entry value handling\n- CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote\n  handling\n- CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size\n  checks","status":"published","published":"2026-04-21T10:53:41Z","modified":"2026-06-01T00:32:24.65725173Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776769506","title":"libexif: Fix of 3 CVEs","description":"- CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote\n  entry value handling\n- CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote\n  handling\n- CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size\n  checks","status":"published","published":"2026-04-21T11:05:11Z","modified":"2026-06-01T00:32:47.487722719Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776791358","title":"libexif: Fix of 3 CVEs","description":"- CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote\n  entry value handling\n- CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote\n  handling\n- CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size\n  checks","status":"published","published":"2026-04-21T17:09:24Z","modified":"2026-06-01T00:33:09.906297524Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1787305055","title":"Fix CVE(s): CVE-2026-32775, CVE-2026-40385, CVE-2026-40386","description":"   * SECURITY UPDATE: out-of-bounds write in MakerNote value formatting\n     - debian/patches/CVE-2026-32775.patch: reject maxlen == 0 before the\n       maxlen-- underflow in mnote_canon_entry_get_value(),\n       mnote_fuji_entry_get_value(), mnote_olympus_entry_get_value() and\n       mnote_pentax_entry_get_value().\n     - CVE-2026-32775\n   * SECURITY UPDATE: integer overflow when reading Nikon MakerNotes\n     - debian/patches/CVE-2026-40385.patch: bound the offset read from the\n       MakerNote before adding it to datao in\n       exif_mnote_data_olympus_load(), which could wrap on 32-bit size_t\n       and lead to out-of-bounds reads.\n     - CVE-2026-40385\n   * SECURITY UPDATE: unsigned integer underflow in MakerNote tag lookup\n     - debian/patches/CVE-2026-40386.patch: use \"i \u003e= n-\u003ecount\" instead of\n       \"i \u003e n-\u003ecount - 1\" in exif_mnote_data_fuji_get_value() and\n       exif_mnote_data_olympus_get_value(), which underflowed when count\n       was 0.\n     - CVE-2026-40386","status":"published","published":"2026-08-21T09:37:47Z","modified":"2026-10-26T09:31:47.557842542Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1792990909","title":"libexif: Fix of 3 CVEs","description":"- CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote\n  entry value handling\n- CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote\n  handling\n- CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size\n  checks","status":"published","published":"2026-10-26T05:02:02Z","modified":"2026-10-26T09:31:57.223636298Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"MGASA-2026-0112","title":"Updated libexif packages fix security vulnerabilities","description":"CVE-2026-32775: libexif through 0.6.25 has a flaw in decoding\nMakerNotes. If the exif_mnote_data_get_value function gets passed in a 0\nsize, the passed in-buffer would be overwritten due to an integer\nunderflow.\nCVE-2026-40385: In libexif through 0.6.25, an unsigned 32bit integer\noverflow in Nikon MakerNote handling could be used by local attackers to\ncause crashes or information leaks. This only affects 32bit systems.\nCVE-2026-40386: In libexif through 0.6.25, an integer underflow in size\nchecking for Fuji and Olympus MakerNote decoding could be used by\nattackers to crash or leak information out of libexif-using programs.\n","status":"published","published":"2026-05-07T05:06:13Z","modified":"2026-05-07T05:15:39.239151Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10717-1","title":"libexif-devel-0.6.26-1.1 on GA media","description":"These are all security issues fixed in the libexif-devel-0.6.26-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-07T00:00:00Z","modified":"2026-05-08T08:16:16.272006Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:21023-1","title":"Security update for libexif","description":"This update for libexif fixes the following issues\n\n- CVE-2026-32775: Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755).\n- CVE-2026-40385: information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000).\n- CVE-2026-40386: denial of service and information disclosure via integer underflow in MakerNote decoding\n  (bsc#1262001).\n","status":"published","published":"2026-06-22T14:30:37Z","modified":"2026-06-30T18:24:37.106448832Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22324-1","title":"Security update for libexif","description":"This update for libexif fixes the following issues\n\n- CVE-2026-32775: Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755).\n- CVE-2026-40385: information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000).\n- CVE-2026-40386: denial of service and information disclosure via integer underflow in MakerNote decoding\n  (bsc#1262001).\n","status":"published","published":"2026-06-22T14:27:22Z","modified":"2026-07-02T18:24:11.013087789Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2837-1","title":"Security update for libexif","description":"This update for libexif fixes the following issues\n\n- CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote \n  handling (bsc#1262000)\n- CVE-2026-40386: Fixed denial of service and information disclosure via integer underflow in MakerNote \n  decoding (bsc#1262001)\n- CVE-2026-32775: Fixed Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755)\n","status":"published","published":"2026-07-10T08:01:49Z","modified":"2026-07-11T09:15:06.22278865Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:2838-1","title":"Security update for libexif","description":"This update for libexif fixes the following issues\n\n- CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote \n  handling (bsc#1262000)\n- CVE-2026-40386: Fixed denial of service and information disclosure via integer underflow in MakerNote \n  decoding (bsc#1262001)\n- CVE-2026-32775: Fixed Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755)\n","status":"published","published":"2026-07-10T08:02:27Z","modified":"2026-07-11T09:15:06.177585716Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8531-1","title":"libexif vulnerabilities","description":"It was discovered that libexif had an integer overflow in its MakerNote\ndecoder when called with a zero-length buffer. An attacker could possibly\nuse this issue to cause a denial of service or obtain sensitive\ninformation. (CVE-2026-32775)\n\nIt was discovered that libexif had an integer overflow in its Nikon\nMakerNote handler on 32-bit systems. A local attacker could possibly use\nthis issue to cause a denial of service or obtain sensitive information.\n(CVE-2026-40385)\n\nIt was discovered that libexif had an integer underflow in its size\nchecking for Fuji and Olympus MakerNote decoding. An attacker could\npossibly use this issue to cause a denial of service or obtain sensitive\ninformation. (CVE-2026-40386)","status":"published","published":"2026-07-13T12:15:07Z","modified":"2026-07-13T20:44:41.789481778Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}