Medium severity4.0NVD Advisory· Published Apr 12, 2026· Updated Apr 14, 2026

CVE-2026-40386

Description

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

Affected products

Libexif Project/Libexif
cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*
Range: <=0.6.25

Patches

dc6eac6e9655

https://github.com/libexif/libexifvia nvd-ref

commit

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

github.com/libexif/libexif/commit/dc6eac6e9655d14d0779d99e82d0f5f442d2f34bnvdPatch

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000