← Back

CVE-2026-40386

nvd nist
Published: Apr 12, 2026Modified: Apr 14, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Affected (1)

Libexif Project
1 product
Libexif
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libexif
Up to 0.6.25

Related CWEs

CWE-191
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (1)

Source: cve@mitre.org
Patch

Timeline

No history available yet.