CVE-2026-40386

CVSS Score & Metrics

Base Score

4.0 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L                                    

Vulnerability Description

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Vulnerability Details

Published Date

April 12, 2026

Last Modified

April 14, 2026

CWE ID

CWE-191

Source

NVD

Vendor

libexif project

Product

libexif

External References

https://github.com/libexif/libexif/commit/dc6eac6e9655d14d0779d99e82d0f5f442d2f34b

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment