CVE-2026-40385

Name
CVE-2026-40385
Description
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://github.com/libexif/libexif/commit/93003b93e50b3d259bd2227d8775b73a53c35d58

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:* libexif >= None <= 0.6.25

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
libexif edge-community 0.6.25-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libexif edge-community 0.6.24-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libexif edge-community 0.6.23-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libexif edge-community 0.6.22-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libexif edge-community 0.6.21-r3 None possibly vulnerable
libexif edge-community 0.6.21-r0 None possibly vulnerable
libexif edge-community 0.6.19-r0 None possibly vulnerable
libexif 3.23-community 0.6.26-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libexif 3.23-community 0.6.25-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable