Medium severity4.0NVD Advisory· Published Apr 12, 2026· Updated Apr 14, 2026

CVE-2026-40385

Description

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

Affected products

Libexif Project/Libexif
cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*
Range: <=0.6.25

Patches

93003b93e50b

https://github.com/libexif/libexifvia nvd-ref

commit

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

github.com/libexif/libexif/commit/93003b93e50b3d259bd2227d8775b73a53c35d58nvdPatch

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000