CVE-2026-40386

libexif project / libexif PUBLISHED

Description (CNA)

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Affected (CNA)

Vendor / product	Versions
libexif project / libexif	affected 0 through 0.6.25

CWE

CWE-191

References

https://github.com/libexif/libexif/commit/dc6eac6e9655d14d0779d99e82d0f5f442d2f34b

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.