https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:11:00.077848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:20929 ALSA-2026:20929 — Moderate: libexif security update 2026-10-03T23:11:00.438970+00:00

Affected: AlmaLinux:8: libexif, AlmaLinux:8: libexif-devel

The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

* libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-10464 bdu:2026-10464 2026-10-03T23:11:00.439071+00:00 bdu:2026-10464 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0445 certfr-2026-avi-0445 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at… 2026-10-03T23:11:00.439099+00:00 certfr-2026-avi-0445 https://cve.radiocsirt.org/vuln/euvd-2026-291291 EUVD-2026-291291 2026-10-03T23:11:00.439124+00:00 EUVD-2026-291291 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40385 fkie_cve-2026-40385 2026-10-03T23:11:00.439142+00:00

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

 https://cve.radiocsirt.org/vuln/ghsa-j9xr-5c85-xjhm GHSA-j9xr-5c85-xjhm 2026-10-03T23:11:00.439177+00:00

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-40385 msrc_CVE-2026-40385 — CVE-2026-40385 2026-10-03T23:11:00.439199+00:00 msrc_CVE-2026-40385 https://cve.radiocsirt.org/vuln/oesa-2026-1987 OESA-2026-1987 — libexif security update 2026-10-03T23:11:00.439245+00:00

Affected: openEuler:20.03-LTS-SP4: libexif, openEuler:22.03-LTS-SP4: libexif, openEuler:24.03-LTS: libexif, openEuler:24.03-LTS-SP1: libexif, openEuler:24.03-LTS-SP2: libexif, openEuler:24.03-LTS-SP3: libexif

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags. Security Fix(es):

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.(CVE-2026-40385)

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.(CVE-2026-40386)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10717-1 openSUSE-SU-2026:10717-1 — libexif-devel-0.6.26-1.1 on GA media 2026-10-03T23:11:00.439298+00:00

libexif-devel-0.6.26-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:26190 RHSA-2026:26190 — Red Hat Security Advisory: libexif security update 2026-10-03T23:11:00.439326+00:00

libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding

 https://cve.radiocsirt.org/vuln/rlsa-2026:22553 RLSA-2026:22553 — Moderate: libexif security update 2026-10-03T23:11:00.439353+00:00

Affected: Rocky Linux:9: libexif

The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

* libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)

* libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22324-1 SUSE-SU-2026:22324-1 — Security update for libexif 2026-10-03T23:11:00.439391+00:00

Security update for libexif

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40385 UBUNTU-CVE-2026-40385 2026-10-03T23:11:00.439425+00:00

Affected: Ubuntu:Pro:14.04:LTS: libexif, Ubuntu:16.04:LTS: libexif, Ubuntu:18.04:LTS: libexif, Ubuntu:20.04:LTS: libexif, Ubuntu:22.04:LTS: libexif, Ubuntu:24.04:LTS: libexif, Ubuntu:25.10: libexif, Ubuntu:26.04:LTS: libexif

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1060 WID-SEC-W-2026-1060 — libexif: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen 2026-10-03T23:11:00.439469+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in libexif ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.